Sr. SOC Engineer — Memphis, TN

Title: Sr. SOC Engineer

Location: Onsite – New Carrollton, MD or Memphis, TN

Terms: Full-time

Salary: $135K - $160K

Clearance: Public Trust

Travel: 0% (onsite presence at client facilities)

Position Description

We are seeking a Sr. SOC Engineer to lead the engineering, architecture, deployment, and improvement of the cybersecurity tools and capabilities that support a Security Operations Center (SOC) for a large federal agency across on-premises and cloud environments. This senior role develops and implements cybersecurity solutions, drives detection engineering and automation, translates security and business requirements into technical designs, develops and maintains cybersecurity standards and policies, and promotes cybersecurity awareness. This position works weekday core operational hours, but may require evening, overnight, weekend, and holiday shifts in the case of an incident or emergency.

The successful candidate will:

• Lead engineering and architecture of SOC tools, sensors, platforms, and enclaves.

• Drive detection engineering that measurably improves detection quality.

• Own cybersecurity standards and policies for SOC engineering.

• Evaluate and prototype new SOC technologies.

• Promote cybersecurity awareness and share expertise with other engineers.

Responsibilities:

• Develop and implement cybersecurity solutions to protect systems and networks against potential threats.

• Research and pilot new cybersecurity technologies, and investigate and resolve cybersecurity solution issues.

• Assist with configurations, validate secure complex systems, and test security products and systems to detect security weaknesses.

• Interface with stakeholders in the strategic design process to translate security and business requirements into technical designs.

• Develop mitigations in response to security incidents and evolving cyber threats.

• Support cybersecurity architecture, strategy, research, evaluation, prototyping, integration, deployment, and sustainment of SOC tools, sensors, platforms, and enclaves.

• Ensure engineered solutions comply with client policies, standards, hardening guidelines, security requirements, and approved technical direction.

• Support integration and interoperability of SOC tools, sensors, data sources, platforms, workflows, applications, and related cybersecurity infrastructure.

• Create and maintain engineering documentation, including design documentation, configuration information, test plans, end-to-end configuration flow diagrams, deployment records, and operational handoff materials.

• Support technical change requests through the client’s Change Control Board or equivalent change management process.

• Assist the client with maintaining SOC tool, asset, software license, maintenance, support agreement, and inventory information.

• Develop, test, maintain, and document custom analytics, detections, dashboards, scripts, interfaces, and automation playbooks.

• Perform sensor, rule, alert, and analytics tuning to improve detection quality, reduce false positives, and support efficient SOC operations.

• Prototype and integrate approved SOC technologies and custom capabilities.

• Support development and maintenance of automation, orchestration, and response playbooks.

• Validate custom capabilities before operational use and document results, dependencies, limitations, configuration requirements, and maintenance considerations.

• Recommend targeted improvements to SOC tools, workflows, detections, dashboards, scripts, and content based on operational findings and client priorities.

• Develop and maintain cybersecurity standards and policies.

• Promote cybersecurity awareness across technical teams and stakeholders.

• Review engineering designs, detections, and documentation for quality and compliance.

Required Skills and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 7+ years of relevant professional experience.

• Deep experience engineering, integrating, and sustaining enterprise SOC technologies such as SIEM, SOAR, EDR, IDS/IPS, and network sensors.

• Experience leading detection engineering, including developing, validating, and tuning detections and analytics.

• Experience developing automation, orchestration, and response playbooks.

• Experience translating security and business requirements into technical designs with stakeholders.

• Experience developing and maintaining cybersecurity standards, policies, and engineering documentation.

• Strong scripting and automation skills (e.g., Python, PowerShell).

• Working knowledge of NIST CSF, NIST SP 800-53, and the MITRE ATT&CK framework.

Desired

• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.

• Experience with hybrid on-premises and cloud (AWS, Azure) SOC engineering.

• Experience prototyping and evaluating new security technologies.

• Experience with change management and Change Control Board processes.

• Certifications such as CISSP, GIAC (GCIA, GCED, GCDA), or vendor engineering certifications.

Work Authorization/Clearance: Must be a U.S. Citizen and able to obtain a Public Trust clearance.