Sr SOC Engineer

Are you ready to enhance cybersecurity operations and make a significant impact on IT and OT environments?

Our client is seeking a dedicated professional to join their on-site security operations team. This role is pivotal in ensuring robust security hygiene through vigilant alert monitoring, effective triage, and comprehensive incident response support. You will collaborate closely with the ISSO and IT/OT teams, playing a crucial role in advancing CMMC 2.0 maturity efforts and enhancing detection and response capabilities.

• Security Monitoring & Alert Triage
  • Monitor and triage alerts using tools like CrowdStrike Falcon, Microsoft Defender for Endpoint, and Splunk.
  • Conduct initial investigations to validate alert severity and determine scope and legitimacy.
  • Escalate confirmed incidents with clear documentation and recommended containment steps.
• Incident Response (Tier 1 / Tier 1.5)
  • Execute approved first-response actions, including endpoint isolation and basic forensic collection.
  • Maintain accurate case documentation and support after-action reviews.
• Vulnerability & Patch Visibility
  • Assist with vulnerability lifecycle tracking and support compliance tracking across IT and OT systems.
  • Uphold exemption lists and risk acceptance documentation.
• OT Security Support
  • Understand OT risks and coordinate with stakeholders to ensure proper procedures.
• Documentation, Reporting & Continuous Improvement
  • Produce summaries of SOC activity and assist in tuning detection rules.
  • Maintain high-quality documentation in accordance with compliance requirements.

Required Qualifications

• 3-5 years of experience in SOC, cybersecurity, IT security, or IT operations.
• Familiarity with Splunk, Microsoft Defender for Endpoint, and basic EDR triage concepts.
• Strong understanding of Windows OS fundamentals, core networking, and security principles.

Preferred / Highly Desired Skills

• Experience investigating alerts in EDR tools like CrowdStrike Falcon and Defender for Endpoint.
• Familiarity with OT network environments and compliance frameworks such as CMMC and NIST.
• Certifications like Security+, CCNA, CySA+, SC-200, SC-900, or CrowdStrike Certified Falcon Analyst badges are a plus.

At Talent Wave Associates, we connect outstanding talent with exceptional opportunities. We're proud to be an Equal Opportunity Employer and are committed to fostering an inclusive, people-first recruiting experience. Ready to ride the wave of opportunity? Apply today!

#26-00141