Cyber Security Engineer
Core
Monitor, investigate, and respond to cybersecurity events across enterprise Linux environments using SIEM technologies to ensure mission-critical operations.
Role type
Cyber Security Engineer I (SOC Analyst)
Builds
Security monitoring capabilities and incident response support for federal civilian, defense, and intelligence community customers
Domain
Federal Government / Cybersecurity / Defense
Required skills
SIEM technologies, enterprise Linux environments, security alert monitoring, incident investigation, log analysis, security telemetry analysis, SOP creation, ticketing systems, dashboard creation
Preferred skills
Security+, CySA+, Linux+, Elastic Certified SIEM Analyst, MITRE ATT&CK methodologies, Jira, Confluence, Elastic Security, Elastic Observability, Elastic Agents, Logstash
Technologies
Elastic, Splunk, Jira, Confluence, Logstash
Responsibilities
Perform continuous monitoring of security alerts and operational anomalies using SIEM technologies; Analyze, triage, and investigate security events from enterprise monitoring platforms; Monitor enterprise Linux environments and network activity for anomalous behavior; Perform initial cybersecurity incident investigations and document findings; Validate alerts for accuracy and escalate advanced incidents; Monitor health and availability of security monitoring components; Validate successful log ingestion and identify missing sources; Utilize dashboards and reporting to identify security trends; Assist in validating effectiveness of security detections; Create and maintain SOPs and technical documentation; Participate in routine health checks of monitoring platform components; Collaborate with senior engineers during advanced investigations; Support cybersecurity incident response activities
Seniority
Junior, hands-on IC