Seneca Technologies is seeking a Cyber Security Engineer I to support Security Operations Center (SOC) operations in Orlando, FL. In this role, you will play a key part in monitoring, investigating, and responding to cybersecurity events across enterprise Linux environments utilizing Security Information and Event Management (SIEM) technologies. Working collaboratively with cybersecurity engineers and operational teams, you will help ensure the availability, integrity, and effectiveness of cybersecurity monitoring capabilities supporting mission-critical operations. The ideal candidate will possess strong analytical and technical skills with a commitment to maintaining cybersecurity standards within a dynamic Department of Defense environment.
Responsibilities include, but are not limited to:
- Perform continuous monitoring of security alerts and operational anomalies utilizing enterprise Security Information and Event Management (SIEM) technologies supporting Security Operation Center operations.
- Analyze, triage, and investigate security events generated from enterprise monitoring and security platforms.
- Monitor enterprise Linux environments, network activity, and security telemetry for anomalous or suspicious behavior.
- Perform initial cybersecurity incident investigations and document investigative findings utilizing established procedures.
- Validate alerts for accuracy and escalate advanced incidents when appropriate.
- Monitor the health and availability of security monitoring components and identify connectivity or reporting issues impacting cybersecurity operations.
- Validate successful log ingestion and identify missing or delayed log sources affecting security visibility.
- Utilize dashboards, visualizations, and reporting capabilities to identify security trends and operational anomalies.
- Assist in validating the effectiveness of existing security detections and alerting capabilities.
- Validate Linux logging requirements and security event collection for supported technologies.
- Create and maintain Standard Operating Procedures (SOPs), investigation guides, and technical documentation supporting cybersecurity operations.
- Participate in routine health checks of cybersecurity monitoring platform components supporting Network Monitoring Center operations.
- Collaborate with Cyber Security Engineers II and III during advanced incident investigations and cybersecurity initiatives.
- Support cybersecurity incident response activities as required.
Basic Qualifications:- Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance is required.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical field
- 3 or more years of relevant professional experience supporting cybersecurity operations, network monitoring, enterprise Linux environments, or equivalent technical disciplines. Equivalent combinations of education, professional certifications, military service, and relevant professional experience will be considered.
- Experience performing cybersecurity alert monitoring and incident investigations.
- Experience supporting enterprise Linux environments.
- Experience utilizing enterprise monitoring or Security Information and Event Management (SIEM) technologies.
- Experience documenting investigative findings utilizing ticketing, case management, or equivalent systems.
- Ability to analyze and interpret security events to identify suspicious or malicious activity.
Desired Skills:- An active Security+, CySA+, or equivalent cybersecurity certification satisfying applicable Department of Defense cybersecurity workforce requirements is highly preferred.
- Linux+, Elastic Certified SIEM Analyst certifications
- Experience utilizing enterprise SIEM technologies such as Elastic, Splunk, or equivalent technologies.
- Experience monitoring enterprise Linux environments, network security events, and cybersecurity telemetry.
- Familiarity with MITRE ATT&CK methodologies and cybersecurity frameworks.
- Experience utilizing Jira, Confluence, or comparable collaboration platforms.
- Experience supporting cybersecurity operations within Government, Department of Defense, or enterprise environments.
- Familiarity with cybersecurity incident response processes and investigative methodologies.
- Experience developing dashboards, visualizations, and reporting capabilities supporting cybersecurity operations.
- Experience supporting Elastic Security, Elastic Observability, Elastic Agents, or Logstash is highly desired.
