Staff Cybersecurity Engineer

Who you are

• Ability to lawfully access information and technology that is subject to US export controls
• BS in Cybersecurity or related technical field with 3+ years of relevant industry experience (5+ years’ experience in lieu of degree)
• Expertise in Cybersecurity Analytics
• Professional experience in a Security Operations Center (SOC) or similar environment offering cybersecurity services
• Strong problem-solving skills with the ability to troubleshoot security issues and provide user support
• Excellent communication and interpersonal skills
• Flexibility and willingness to work overtime, including weekends and overnight as needed
• At least one DoD baseline security certification, such as CISSP, Sec+, A+Sec, OR the ability to rapidly receive such certification
• Certifications Certified Information Systems Security Professional (CISSP) or OSCP
• Project management experience with the capacity to manage multiple projects and meet deadlines under pressure
• Professional technical leadership in a security operations center (SOC) or similar cybersecurity service

What the job involves

• We are looking for a Cybersecurity Engineer with experience in SOC operations in a federal contractor environment
• This role is hands-on and you will serve as a lead as well as a threat analyst maintaining risk posture across information technology (IT) and operational technology (OT) domains
• Identify and analyze threats across the enterprise
• Tune SIEM detections and develop correlation searches, Network Intrusion Detection rules, and firewall logic
• Be the technical escalation backstop for complex cybersecurity incidents
• As directed by leadership, implement STIGs and other security baselines to corporate systems, architecture, and applications
• Conduct post-incident reviews to identify architectural gaps and define security enhancements
• Provide proactive threat research and regularly report on Cybersecurity Threat Intelligence
• In association with the ISSM, develop, maintain, and test an Incident Response Plan and playbooks
• In association with the ISSM, conduct regular security assessments and define remediation strategies to address control deficiencies