Information Security Engineer
Requirements:

• 5 years experience as Security Engineer
• Experience designing alert requirements in SOC environment for incidents coming in from Splunk
• Strong incident response process experience
• Experience w/ firewalls--Cisco, Fortinet, or Palo Alto (
• Crowdstrike experience
• Ability to obtain Public Trust and eventually Secret Clearance

The Sr. Information Security Engineer position in the Federal Security Operation Center (SOC organization will have the task of leading the Federal SOC Incident Response Team. The position will have two main responsibilities:
1. This position will be in a leadership role in the Federal SOC Incident Response Team in a 24x7x365 environment operation in a minimum of two SOC locations. This capability does not exist today, and the role will be responsible for standing up the new capability. At a high level, the Federal Incident Response Team will be responsible for operation, maintenance, and monitoring of Security Events for Federal customers and internal Federal Service Enclaves. This role performs security event management functions - monitoring, detection, triage of security events and alerts in Security Information Event Management (SIEM) and associated monitoring systems.
2. The position will be responsible for establishing technical processes and tools focused on Incident Response and Threat Hunting. This includes developing a training and certification framework enabling the success of Federal Incident Response Team individual contributors