Purpose and Impact: ( a write up about the program that will attract candidates )
Come be part of a dynamic program that delivers enterprise infrastructure, systems engineering, and operational support across multiple mission-critical network environments. Our team designs, implements, and sustains modern technology solutions supporting real-world customer operations.
We foster a highly collaborative and technical culture that values innovation, continuous learning, and professional growth. Team members are encouraged to expand their expertise through training opportunities, cross-functional collaboration, and hands-on experience with a wide range of technologies supporting complex operational environments.
Work Schedule: (shift hours and days of the week)
8hrs / day, 5 days per week, all onsite
Occasional after hours work for system maintenance
Essential Responsibilities: ( describe the day-to-day )
We are seeking a highly motivated SOC Engineer to support the design, deployment, and continual improvement of enterprise Security Operations Center (SOC) capabilities. The successful candidate will serve as a key technical contributor responsible for SIEM engineering, log management architecture, threat detection development, security automation, and incident response support within classified environments.
This is a hands-on-keyboard position requiring expertise in deploying and maintaining security monitoring platforms, developing advanced detection capabilities, and improving the overall effectiveness of cyber defense operations. The SOC Engineer will work closely with cybersecurity analysts, incident responders, system administrators, network engineers, and customer stakeholders to enhance security visibility and defend critical mission systems against evolving threats.
Key Responsibilities include:
Design, implement, configure, and maintain SIEM, log management, and security monitoring solutions supporting enterprise cybersecurity operations.
Evaluate existing SOC architectures and recommend improvements to increase operational effectiveness, scalability, and threat visibility.
Engineer and optimize log collection pipelines to ensure comprehensive security event coverage across network, system, application, and cloud environments.
Develop, test, tune, and maintain detection content, including correlation searches, threat detections, alerts, signatures, and analytics.
Identify gaps in detection coverage and implement solutions aligned with current threat intelligence and adversary techniques.
Create and maintain SOC playbooks, standard operating procedures, and incident response workflows.
Support security incident investigations through log analysis, endpoint analysis, malware analysis, and forensic data collection.
Design and implement security automation and orchestration capabilities to reduce analyst workload and improve response times.
Develop metrics, dashboards, and reporting capabilities to measure SOC performance, alert fidelity, detection effectiveness, and operational health.
Participate in threat hunting activities to identify stealthy or previously undetected malicious activity.
Support malware analysis efforts, including static and dynamic analysis techniques and reverse engineering activities when required.
Author scripts and automation tools using languages such as Python, PowerShell, or Bash to improve SOC efficiency and detection capabilities.
Document technical architectures, operational procedures, engineering designs, and implementation plans.
Provide technical recommendations regarding emerging security technologies, tools, and best practices.
Collaborate with customer stakeholders to understand mission requirements and translate those requirements into technical solutions.
Work Environment, Physical Demands, and Mental Demands:
Standard working environment
Minimum Requirements (Knowledge, Skills, and Abilities):
6+ years of experience supporting Security Operations Centers (SOC), cybersecurity…