INFO SECURITY ANALYST IV

Description

SOC Engineer (Security Operations Center)

Location: Remote (Washington, DC area preferred)

Travel: Must be willing to attend quarterly in-person team meetings

Clearance: Ability to obtain Public Trust (Currently held preferred)

Duration: 6-month contract, potential for extension or conversion.

Position Overview

We are seeking a skilled SOC Engineer to design and maintain Security Operations Center (SOC) data feed solutions, implement SOAR capabilities, and ensure feed health through collaboration with cross-functional teams. This role requires strong cybersecurity expertise, including network security, SIEM, incident response, and threat detection.

The SOC Engineer will also serve as a backup SOC Lead, managing escalations and providing leadership updates during critical incidents when the primary lead is unavailable.

Key Responsibilities

• Microsoft Sentinel Engineering: Maintain and optimize Microsoft Sentinel SIEM/SOAR solutions in alignment with client requirements, industry best practices, and federal compliance mandates.
• Data Integration: Configure and manage log/data feeds from diverse sources (e.g., Fluent Bit, Windows Events, M365, cloud services, endpoint/security platforms).
• Parsing & Normalization: Develop and refine log parsing rules using Regex, DCRs, and custom transformations for accurate and usable data in Sentinel.
• SOAR Development: Engineer automation and orchestration solutions using Microsoft Logic Apps, Azure Functions, and PowerShell/Python scripts to improve SOC efficiency and incident response.
• Threat Detection Engineering: Build, tune, and optimize analytic rules, UEBA, dashboards, and reports to enhance detection and response coverage.
• Collaboration: Work with network, endpoint, cloud, and IT operations teams to integrate new data sources and deliver actionable SOC capabilities.
• Documentation & Knowledge Transfer: Create and maintain SOC architecture documentation, onboarding guides, and automation playbooks; train SOC analysts on new tools and processes.
• Advisory & Improvement: Conduct gap analyses of SOC capabilities, recommend improvements, and contribute to SOC process maturity.
• Incident Response Support: Provide Tier 3 support and assist with complex investigations as needed.
  
  

Requirements

Required Qualifications

• Ability to obtain Public Trust clearance.
• 2-5 years of experience in network defense, SOC engineering, or cybersecurity operations.
• Hands-on experience with Microsoft Sentinel (log onboarding, rule development, automation).
• Proficiency with log parsing and normalization (Regex, Fluent Bit, DCRs, KQL).
• Strong scripting skills in PowerShell and/or Python.
• Experience configuring and maintaining data feeds for SOC visibility (cloud, endpoint, network, on-prem).
• Familiarity with incident response concepts, threat detection engineering, and SOAR workflows.
• Excellent written and verbal communication skills.
  
  

Preferred Qualifications

• Knowledge of federal cybersecurity mandates (M-21-31, NIST CSF, CISA Playbooks, BOD 22-01).
• Experience with Microsoft Logic Apps, Azure Functions, or other SOAR platforms.
• Experience with UEBA configuration and anomaly detection.
• Background in AI/ML frameworks for cyber analytics.
• Experience building SOC metrics, dashboards, and reporting.
• Familiarity with M365, Azure security tools, ServiceNow workflows, and CISA CDM tools.
• Relevant certifications (CISSP, CISM, SC-200, AZ-500).
  
  

Education & Experience

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• 5 years of progressive cybersecurity/SOC experience (engineering and operations).
  
  

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use.