Cyber Operations Lead ensuring coordination of cyber operations between the Security Operations Center and internal business units. Enhancing security through effective incident response and threat management initiatives.
About the role
- Security Operations Engineer supporting federal cybersecurity initiatives across enterprise and cloud environments. Hands-on security engineering, operational monitoring, and compliance support.
Responsibilities
- Monitor, investigate, and respond to security alerts and incidents using **Elastic Security (SIEM/XDR)**
- Design, deploy, and maintain the **Elastic Stack (Elasticsearch, Logstash, Beats, Kibana)**
- Develop and tune detection rules, dashboards, and alerting workflows
- Conduct threat hunting and advanced log analysis
- Perform vulnerability scanning and analysis using tools such as **ACAS / Tenable**
- Track and remediate vulnerabilities in accordance with federal timelines
- Coordinate patching and mitigation efforts with infrastructure and application teams
- Implement and maintain controls aligned with **NIST 800-53, FISMA, and FedRAMP**
- Support **ATO (Authority to Operate)** activities including documentation and evidence collection
- Produce compliance and CDM reporting using Elastic dashboards and data feeds
- Integrate security monitoring and logging into **CI/CD pipelines** and Infrastructure-as-Code
- Automate ingestion, enrichment, and response workflows using **Python, Bash, or PowerShell**
- Enforce secure configuration baselines (STIGs, CIS benchmarks)
- Partner with DevOps and SRE teams to embed security observability into system design
- Advise stakeholders on risk posture, detections, and mitigation strategies
- Communicate technical findings to both technical and non-technical audiences
Requirements
- Hands-on production experience with the **Elastic Stack (ELK)**
- Direct experience using **Elastic Security** as a SIEM/XDR platform
- Log pipeline design, parsing, enrichment, and lifecycle management
- Security event monitoring, alert triage, and incident response
- Linux and Windows security administration
- Scripting or automation experience (**Python, Bash, or PowerShell**)
- Experience in **cloud or hybrid environments** (AWS, Azure, GCP, or GovCloud)
- Strong familiarity with NIST 800-53, 800-61, 800-137
- FISMA federal cybersecurity requirements
- FedRAMP control implementation and monitoring
- Experience supporting audits, assessments, or **ATO packages**
- **Active Secret Clearance**
Benefits
- comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option
- vision plan
- dental insurance with the base dental plan option paid for by PGTEK
- Life Insurance
- Short and Long-Term disability
- Critical Illness insurance have premiums covered
- matching 401(k) plan
- discount on pet insurance through ASPCA Pet Insurance
- Employee Assistance Program available at no cost to all employees
- generous amount of PTO and Holidays
- Education Assistance Program available after 12 months of employment
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Solution Sales Manager enhancing revenue in financial services, focusing on ServiceNow IRM and Tanium solutions. Collaborating with teams and engaging C - level executives in Austria and Switzerland.
Senior Internal SOC Analyst leading security triage and investigations for Darktrace, utilizing AI - driven cybersecurity technology. Collaborating on incident response and mentorship within a hybrid work environment.
Security Operations Intern responsible for security monitoring at Paddy Power Betfair. Involves data loss prevention investigations and content filtering analysis with a commitment to improving security posture.
SOC Analyst L2 responsible for managing and analyzing security incidents in digital transformation. Contributing directly to the protection of companies and infrastructures.
SOC Analyst L3 managing and analyzing security events and incidents for Var Group. Responsible for incident management and proactive threat analysis.
Senior Manager leading global IT security operations to protect company data and assets at Keenova. Overseeing incident response, monitoring, and cybersecurity capabilities with strategic oversight.
Security Operations Center leader at Woven by Toyota, managing triage and response to security alerts in Japan. Collaborating with global SOCs to ensure 24/7 operations.
GSOC Analyst responsible for security operations at Paramount Studios. Developing workflows, incident response, and risk monitoring in a dynamic team environment.
Senior Cybersecurity Analyst enhancing detection and response capabilities at Insulet, focusing on threat detection and incident response.