Security Operations Center Engineer - Broomfield,CO/ St Paul,MN

Federal SOC Information Security Engineers will provide monitoring, triage, and escalation support for internal Federal SOC and External Customer operations. The SOC Information Security Engineers will work shifts to provide 24x7x365 coverage. SOC Information Security Engineers will work in tandem with other Information Security Engineers in the Global SOC and Federal NOC Organizations.

• Review Global SOC Shift end Summary and SOC activity logs, emails, tickets, cases and other monitoring tools for complete understanding of previous shift activities and incidents with the goal of maintaining the highest level of customer service by keeping track of the critical customer impacting issue.


• Provide monitoring and responding to alerts and events within SLAs. Services and systems include but not limited to Splunk (internal/external SIEM), DDOS- Distributed Denial of Services mitigation, Firewalls alerts (MTIPS and MSS), TrendMicro Anti Virus, Tripwire File Integrity Checks, IDS/IPS for customers.


• Monitor multiple ticketing systems and queues. Ensure tickets are created and notated within SLAs


• Login to phone call queues to answer both internal and external calls


• Triage DDOS attacks targeted on Federal Customers.


• Work closely with FedNOC, the Federal SOC Tier II and Ops Eng teams


• Escalate issues to Vendors, SOC Tier II and Ops Engineers as soon as there is a need


• Adhere to all defined processes and procedures.


• Provide process and operational improvement suggestions.

Competency