Role OverviewThe SOC Engineer works with customers to determine log management and SIEM needs, evaluates existing systems for improvements, gaps, and next generation architecture and design. The role involves designing and deploying new systems, upgrading existing systems, and identifying gaps in malicious activity detection capabilities.
What You Will Do
The SOC Engineer will identify gaps in malicious activity detection capabilities, create new signatures/rules to improve detection of malicious activity, and test and tune existing signatures/rules to ensure low rate of false positives. The role also involves assisting in playbook development for alert triage and Incident Response, defining and implementing alert and threat detection metrics, and recommending new tools/technologies to improve network visibility.
Why It Might Be a Fit
The ideal candidate will have direct hands-on experience with tools such as Logstash, Podman, Docker, Splunk, Corelight, Security Onion, Windows Operating System, and Red Hat Enterprise License. Prior military experience and Python/Ansible Scripting experience are also preferred.
Requirements
- TS/SCI security clearance
- IAT certification (CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security, and CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND)
- Vendor certification (Microsoft, Cisco, Splunk, Linux, or any other related vendor certification)
- 2+ years of experience working as an information security analyst or engineer
- SOC experience is a plus
- Python and/or Ansible Scripting experience is preferred
- Prior military experience is preferred
Benefits
- Health and Wellness Benefits
- Medical Insurance
- Dental and Vision Insurance
- Health Savings Account (HSA) contributions
- Personal Insurance Benefits
- Company-paid Life Insurance and AD&D coverage
- Company-paid Short-term and Long-term Disability Insurance
- Paid Leave
- Retirement
- Pre-tax 401k program including 6% company match
]]>