Top Tech Jobs & Startup Jobs

The SOC Manager leads 24x7x365 Security Operations Center activities, including Tier 1–3 analyst teams, incident response, alert triage, containment, eradication, recovery, and advanced forensics. The role manages SIEM dashboards, SOAR playbooks, SOC documentation, schedules, call trees, performance metrics, and compliance with NIST SP 800-61. Responsibilities also include post-incident reviews, threat intelligence coordination, analyst training, governance participation, and cross-team leadership during high-severity incidents.

Supports and maintains WAN/LAN environments across multiple networks and security domains. Installs, monitors, troubleshoots, and optimizes network hardware, software, satellite communications, and IP services. Develops network architecture diagrams, road maps, test plans, and upgrade documentation; evaluates emerging technologies; performs site surveys; and ensures compliance with customer and government security policies. The role requires active Top Secret clearance and onsite work in Springfield, Virginia.

Performs incident response and digital forensics across enterprise and cloud environments. Responsibilities include real-time incident management, malware and memory analysis, evidence preservation, network and filesystem analysis, technical reporting, threat hunting, detection-rule development, security monitoring enhancement, customer assessments, tabletop exercises, and lessons learned. The role also maintains forensic laboratories, develops security procedures, supports SOC leadership, and participates in rotating on-call coverage.

The Business Analyst gathers and documents requirements, analyzes business processes and data, develops functional specifications and business cases, and recommends improvements. The role facilitates stakeholder workshops, collaborates with developers and project managers, supports project planning and reporting, conducts user acceptance testing, creates training materials, and helps ensure information systems meet business, accessibility, security, and compliance needs.

The Senior Archer Engineer develops, implements, administers, and supports RSA Archer eGRC solutions. Responsibilities include custom Archer development, system administration, integrations through APIs, data imports and exports, reporting, user account management, troubleshooting, system availability, user training, and technical support. The role also applies NIST risk management and security control frameworks, collaborates with security and infrastructure teams, and participates in on-call support.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Owns and governs cybersecurity systems architecture across cloud-native AWS GovCloud environments. Designs Zero Trust solutions, security controls, integration patterns, architecture blueprints, and engineering design documents. Leads integration of SIEM, SOAR, CDM, TDSP, EDR, identity platforms, and DevSecOps pipelines. Oversees cloud architecture, modernization, technical roadmaps, governance reviews, and collaboration with engineering and business stakeholders while ensuring compliance with federal security standards and FedRAMP requirements.

Administer and maintain enterprise SIEM and SOAR infrastructure, including Elastic and Splunk platforms. Manage security event data ingestion, detection rules, alerts, integrations, automation workflows, system health, performance, upgrades, and documentation. Analyze security events, support incident response, collaborate with CSSP teams, guide analysts, and recommend improvements. The role requires Linux administration, scripting, networking knowledge, threat detection expertise, and rotational after-hours support.

Provide systems engineering and cybersecurity services for Intelligence Community networks across multiple security domains and locations. Responsibilities include infrastructure design, Linux and Windows administration, network services, virtualization, cloud environments, SIEM technologies, cybersecurity troubleshooting, and root cause analysis. The role requires active Top Secret clearance, advanced systems engineering knowledge, and the ability to work independently in onsite locations.

Leads complex incident response, threat hunting, digital forensics, purple team exercises, and detection engineering within a CSSP environment. The analyst evaluates IDS/IPS signatures and log correlation rules, coordinates incident reporting, maintains SOPs aligned with CJCSM 6510.01B, mentors junior analysts, and supports 24/7 operations. The role is fully onsite in Charleston, South Carolina, requires an active Secret clearance, and may involve up to 10% OCONUS travel.