Cybersecurity Engineer II

The Cybersecurity Engineer II supports customer Security Operations Center (SOC) technologies through engineering, integration, deployment, testing, configuration, and ongoing sustainment. This onsite role in Washington, DC focuses on detection engineering, SOC capability development, and maintaining dependable operations for Government-approved tools.

Location and Compensation

• Location: Washington, DC (onsite)
• Salary: USD 150,000 - 160,000 per yearly

Summary of the Role

The Cybersecurity Engineer II performs cybersecurity engineering and sustainment activities supporting customer SOC technologies, including integration and deployment of SOC tools and detection engineering. The position also includes developing and validating detections and custom SOC capabilities, along with maintaining documentation and configurations.

Key Responsibilities

• Support cybersecurity architecture, engineering, research, evaluation, prototyping, integration, deployment, and sustainment.
• Deploy, configure, operate, maintain, and troubleshoot Government-approved SOC technologies.
• Support technical integration and interoperability between SOC tools, platforms, sensors, applications, workflows, and data sources.
• Produce engineering documentation such as configuration information, test plans, diagrams, deployment records, and handoff documentation.
• Support Government technical change-control activities.
• Develop and test detections, dashboards, scripts, analytics, interfaces, automation, and custom SOC capabilities.
• Tune sensors, rules, alerts, and analytics to improve detection quality and reduce false positives.
• Test and validate capabilities prior to operational deployment.
• Support knowledge transfer and technical documentation for Contractor-supported capabilities.

Cybersecurity Engineering and SOC Capability Scope

The Engineer II supports SOC tool and sensor lifecycle activities including research, evaluation, prototyping, integration, deployment, maintenance, and troubleshooting. Work includes interoperability across data sources, cybersecurity tools, applications, workflows, sensors, and supporting infrastructure.

Detection engineering responsibilities include development, testing, tuning, maintenance, and documentation of analytics, detections, dashboards, scripts, interfaces, automation playbooks, and related SOC capabilities. Before operational use, developed capabilities are validated and documented, including configurations, dependencies, limitations, and sustainment considerations.

Required Qualifications

• Education: Bachelor's degree
• Experience: 3 years
• Education substitution: 3 additional years of experience in lieu of degree
• Certification: IAT II level certification