SOC Engineer Tier 2

If you're seeking a sense of community and the ability for growth, look no further. Since 1982, we have been 100% dedicated to our people. Our approach permits greater ownership for individuals and welcomes input into decisions for a thriving workplace and happy employees. Our people are the core reason for AIS' success. As an employee owned company, we are looking for individuals that are passionate about finding innovative solutions, and excited about emerging technologies and capabilities.

As a SOC Engineer Tier 2 you will use cutting-edge cloud and data technologies to streamline services to our clients. Ensure that large-scale Azure environments are stable and that issues are quickly identified and resolved. Build comprehensive infrastructure alerts and monitoring tools and dashboards to gauge the health of system components. Implement innovation to improve efficiency of Azure infrastructure related activities. Serve as point of escalation for challenging and complex issue resolution. Join our team of Data and Cloud professionals and accomplish what others only dream of

• Provide leadership in ensuring that audits are being done in a way that supports the compliance and security policy. Making sure that changes in the environments that cause compliance and security findings are documented and escalated.

• Review the environment scoping information and inventory to ensure a deep understanding of the organization's business, its applications, and technical solutions.

• Be well versed in the areas of focus on the security roadmap and have an understanding of how they will be implemented and impact the work that the Security Operations Center staff will have to take up.

• Provide the SOC with an understanding as to the mapping between IT & organization security and how it relates to the responsibilities and tasking that the SOC has.

• Ensure that the SOC team is focusing on education based on preventative maintenance and roadmap capabilities.

• Participate in audit reviews to ensure that gaps in coverage are being addressed by the SOC team.

• Support the creation of reporting templates, explain how they are used and generated and the expectation regarding their cadence. Create a process where the reports are reviewed and feedback loops provide the ability to improve them.

• Specialize in SIEM configuration and maintenance.

• Responsible for building the security architecture and systems

• Work with development operations teams to ensure that systems are up to date.

• Document requirements, procedures, and protocols to ensure that other users have the right resources

• Work with customers on complex operational issues

This opportunity is onsite in Mclean / Tysons Virginia.

Must have and maintain a Top Secret Clearance and be able to obtain and maintain a SCI/Poly.
Current/Active TS/SCI with Polygraph is preferred.

• 5 years of experience in systems engineering to operate M365 platforms

• Strong experience in Azure and M365 environments

• Good experience in a variety of SOC engineering/ administration tools

• Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products. Handles daily incidents; monitors, tracks, analyzes and records.

• Work with vendors, outside consultants, and other third parties to improve information security within the organization.

• Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware.

• Monitor security vulnerability information from vendors and third parties.

• Advanced Forensics skills to evaluate current malware and phishing threats.

• Familiarity with Microsoft Azure Sentinel and Microsoft Defender Suite

• Experience with SOC capabilities using tools like Azure Monitor, Azure Sentinel, Azure Automation, Azure Backup, Azure Security Center, etc.

• Apply these capabilities to IaaS and PaaS services such and VMs, Azure Service Environment ASE, Azure Kubernetes Service AKS, Spring Cloud, Azure Virtual Desktop, etc.

• Experience working with AWS logs

• Strong engineering analysis ability

Applied Information Sciences is an Equal Opportunity Employer and does not discriminate on the basis of race, national origin, religion, color, gender, sexual orientation, age, disability, protected veteran status, or any other basis covered by law. Employment decisions are based solely on qualifications, merit, and business need.