Lead the technical engineering and modernization of a 24/7 enterprise Cybersecurity Operations Center (CSOC), owning the integration, configuration, and optimization of SIEM, SOAR, EDR, and IDS/IPS platforms while advancing Zero Trust adoption across cloud and on-premises infrastructure.
What you'll do
- Engineer, integrate, and maintain CSOC security platforms (SIEM, SOAR, EDR, IDS/IPS) with focus on configuration management and performance optimization
- Design and implement Zero Trust architecture principles across hybrid cloud and on-premises environments
- Assess, test, and evaluate emerging security technologies; develop technical reports and detailed implementation roadmaps for modernization initiatives
- Configure and troubleshoot advanced network security solutions including firewalls, NAC, 802.1x, VPNs, Web Application Firewalls, and content filtering
- Develop and maintain comprehensive technical documentation including architecture diagrams, root cause analysis reports, and security compliance assessments
- Automate security operations and system management using scripting (Bash, PowerShell) and orchestration tools (Ansible, Puppet)
- Supervise and coordinate security changes across software, hardware, facilities, and telecommunications infrastructure
Mission
This role supports a critical enterprise cybersecurity program delivering round-the-clock CSOC services. The position is central to modernizing the organization's security architecture and ensuring compliance with federal standards including NIST and FISMA.
Required skills
- SIEM platform engineering and configuration
- SOAR platform integration and sustainment
- EDR and IDS/IPS deployment and troubleshooting
- Network security solutions (firewalls, NAC, 802.1x, VPN, WAF)
- Encryption algorithms and secure communications
- Linux and Windows operating systems administration
- Bash and PowerShell scripting
- Automation tools (Ansible, Puppet)
- NIST, FISMA, and Common Criteria compliance
- Zero Trust architecture principles