Only on w2 need submissions for Cyber Security Engineer, Reston, VA , Remote
Core
Monitoring systems and networks for threats, analyzing security alerts, and leading incident response and mitigation efforts.
Role type
Security Operations Center (SOC) Analyst / Incident Responder
Builds
Security operations capabilities for GSA ETSNext initiative
Domain
Cybersecurity / Government Contracting
Required skills
SIEM platforms (Sumo Logic), Endpoint Detection and Response (EDR), firewall/DNS/proxy log analysis, security incident triage, alert tuning, threat detection
Preferred skills
Python or PowerShell scripting, threat intelligence platforms, compliance frameworks (NIST 800-53, ISO 27001, FedRAMP), Security+ certification
Technologies
Sumo Logic, CrowdStrike
Responsibilities
Monitor systems and networks for suspicious activity, analyze security alerts and differentiate threats from false positives, lead containment and eradication of security incidents, tune SIEM/EDR detection rules, produce regular security reports and trend analysis
Seniority
Mid-level, hands-on IC
