SOC Tools Engineer

TMC Technologies is in search of a junior-Level software developer to provide operations and engineering support for the NOAA Cyber Security Center. The SOC Tools Engineer will participate in the modernization and transformation of the NOAA Cyber Security Center's (NCSC) Security Operations Center's (SOC) capabilities through the development and implementation of several cyber security stack products, including Security Orchestration, Automation, and Response (SOAR); Security Information and Event Management (SIEM); and other tools as assigned. Furthermore, this individual will participate in activities to promote development and configuration automation, integrations with the enterprise Information Technology Service Management (ITSM) solution (ServiceNow), and improvement of system monitoring capabilities, specializing in NIST SP 800-53 Rev. 5, and data retention policies. The ideal candidate will be responsible for ensuring compliance with information security standards, managing security risks, and overseeing the implementation and maintenance of data retention policies. This position is part of the NOAA Cyber Security Center (NCSC) Security Operations Center (SOC) that executes 24x7 cybersecurity monitoring and incident response for NOAA networks. Due to federal contract requirements, the candidate must be a US citizen and possess a minimum of an active DoD Secret clearance (with the ability to obtain a Top Secret clearance) in order to start. 

The SOC Tools Engineer will have the following responsibilities:

- Perform development on cybersecurity system components as assigned, to include Security Orchestration, Automation, and Response (SOAR) and Security Information and Event Management (SIEM) tools.
- Develop integrations between cybersecurity stack components as assigned.
- Draft and maintain system design documentation for all assigned system components according to system design life cycle (SDLC) best practices.
- Analyze customer requirements and provide best approach, feasibility of implementation, level of effort feedback as necessary.
- Serve as liaison for professional services engagements, where available and as needed, to define and translate customer requirements.
- Other software development duties as assigned.

Job Requirements

- US Citizen and Top Secret Clearance required
- Bachelor's degree from an accredited college in related engineering discipline, or equivalent experience required and less than 2 years prior relevant experience.
- Candidate must be able to obtain an SF-85P Public Trust clearance from the NOAA customer.
- Have strong communication skills
- Ability to work autonomously with minimal oversight
- Knowledge of development on classified systems and the required security guidelines associated with secure facilities
- Experience with Information Assurance (IA) hardening and compliance (STIG, CIS, DSS compliance, documentation, etc.)

Preferred Qualifications:
Working knowledge of SIEM platforms (ArcSight, Elasticsearch, Splunk, etc.)
Distributed event streaming platforms (Apache Kafka, Cloudera, Informatica, etc.)
Experience supporting Infrastructure-as-Code (IaC) transformations.
Experience supporting ServiceNow API development and integration
Provided direct support to a Security Operation Center environment
Familiarity with task automation
Must be able to work collaboratively with other system administrators, system engineers, and network engineers in a team environment

The pay range for this position is $55,000 - $70,100.

We are equal opportunity/affirmative action employers, committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status, or any other protected characteristic under state or local law.