Sr. SOC Engineer

Title: Sr. SOC Engineer
Location: DMV
Target Start Date: ASAP
Type: contract
Pay Rate: DOE

About the Role

We are seeking a highly skilled Senior SOC Security Engineer with deep expertise in Application Security to join a dynamic cybersecurity team. This role requires flexibility to support a 24x7x365 Security Operations Center, including regular off-hours coverage.

The position blends real-time threat detection and incident response with proactive application security strategies to protect enterprise digital assets and infrastructure. As a senior member of the SOC, you will lead incident response efforts, mentor junior analysts, and collaborate closely with engineering teams to embed security throughout the software development lifecycle (SDLC).

• Design and implement security controls for third-party software dependencies and open-source components

• Monitor, detect, investigate, and respond to security incidents

• Develop and execute vulnerability management strategies with emphasis on exploitability and reachability analysis

• Conduct deep-dive investigations into software supply chain security (SSCS) threats, including compromised dependencies and malicious packages

• Perform proactive threat hunting for emerging attack vectors

• Assess and mitigate risks associated with software dependencies across enterprise systems and applications

• Lead incident response efforts related to identity-based attacks and supply chain compromises

• Develop detection use cases and threat models specific to SSCS attack vectors

• Establish security practices for evaluating, vetting, and approving third-party packages and libraries

• Collaborate with DevOps and engineering teams to integrate security controls into CI/CD pipelines

• Analyze third-party vulnerabilities (CVEs) in an enterprise context and partner with engineering teams on remediation efforts

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, or a related technical field

• Equivalent professional experience may be considered in lieu of formal education

• 5 years of experience in SOC operations, security monitoring, and incident response

• Desired certifications include CISSP, CASE, OSCP, CSSLP, GIAC, or equivalent

• SIEM and EDR tools: Experience with platforms such as Splunk, Sentinel, QRadar, CrowdStrike, or similar

• Strong understanding of software supply chain security attack vectors (e.g., dependency confusion, compromised packages, malicious commits, backdoors)

• In-depth knowledge of package managers (npm, PyPI, Maven, NuGet, etc.) and associated security risks

• Hands-on experience with artifact repository management tools

• Application security tools: SAST, DAST, and SCA tools (e.g., Veracode, Burp Suite, SonarQube or equivalents)

• Secure coding practices: Deep understanding of OWASP Top 10, SANS Top 25, and remediation techniques

• Cloud security: Familiarity with AWS, Azure, or GCP security configurations and container security

• Proficiency with software composition analysis (SCA) tools and vulnerability reachability concepts

• Experience integrating security controls into CI/CD pipelines

• Familiarity with DevSecOps principles and practices

• Strong analytical and problem-solving skills with attention to detail

• Excellent written and verbal communication skills for cross-functional collaboration

• Proven ability to mentor junior analysts and lead incident response initiatives

Welcome to ConsultNet, a premier national provider of technology talent and solutions. Our expertise spans across project services, contract-to-hire, direct search, and managed services onshore, nearshore, and hybrid.
For over 25 years, we have connected thousands of consultants with meaningful roles through a personal, communication-driven approach, partnering with a diverse client base to build high-performing teams and create lasting impact.
Our comprehensive service offerings cover a wide range of technology and engineering positions across key markets nationwide. Learn more at www.consultnet.com .

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.