View all jobs
SIEM Engineer-SOAR SME
Leesburg, VAClearFocus Technologies, a HUBZone certified company located in Leesburg, VA. We specialize in cybersecurity and support multiple government and commercial clients for a variety of missions. We value our clients, integrity and employees and believe a single person can make a difference!
We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession. We provide an excellent benefit package which includes medical, dental, vision, paid time off, 401(k), paid professional development reimbursement and more!
ClearFocus Technologies is seeking a SIEM Engineer/SOAR SME opportunity in Leesburg, VA.
The ideal candidate will have experience working in a network security environment, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response Team (CIRT), Computer Incident Response Center (CIRC) or Cyber Security Incident Response Center (CSIRC). All applicants must have a Secret or higher clearance.
Job Description
We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession. We provide an excellent benefit package which includes medical, dental, vision, paid time off, 401(k), paid professional development reimbursement and more!
ClearFocus Technologies is seeking a SIEM Engineer/SOAR SME opportunity in Leesburg, VA.
The ideal candidate will have experience working in a network security environment, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response Team (CIRT), Computer Incident Response Center (CIRC) or Cyber Security Incident Response Center (CSIRC). All applicants must have a Secret or higher clearance.
Job Description
- Provide SIEM engineering efforts and provide direct support to SOC operations.
- Serve as the lead for all Security Orchestration, Automation, Response (SOAR) activities within the SOC.
- SOAR activities include:
- Demonstrate SOAR capabilities via SIEM and ticketing system.
- Demonstrate SOAR capabilities via SIEM and remediation activities.
- Demonstrate areas where the application of SOAR will provide immediate return on investment.
- Implement solutions to enable or improve SOAR capabilities.
- Ensure availability of the SIEM and provide administrative oversight of the tool.
- Responsible for the implementation, operations, maintenance, and lifecycle management of the SIEM tool
- Revise and develop processes to strengthen the current operational activities; review policies and recommend changes to improve tool usage and governance.
- Coordinate with stakeholders to build and maintain positive working relationships.
- Excellent analytical and communicative skills along with collaborative, teaming, and interpersonal skills
- Minimum seven (7) years of experience in the role of SIEM/SOAR Content Development
- Splunk experience.
- BS Degree or higher degree
- Active Secret or higher clearance