Training Security Operations Center (TSOC) Engineer or Senior Engineer

The TSOC Engineer plays a critical role in designing, implementing, and managing cybersecurity systems and policies within the TSOC infrastructure and for its clients. This includes developing secure systems aligned with TSOC design principles, determining policies for network security devices such as firewalls, VPNs, and access control mechanisms, and leading various technical projects and initiatives.

The TSOC Engineer will supervise and train students across all phases of security operations as part of their experiential learning opportunity, and enable research by sharing data, providing access to TSOC environments, and sharing pain points that provide opportunities for innovation and manage security analysis tasks for TSOC students and employees. The TSOC engineer may also interact with TSOC clients to understand and address their cybersecurity concerns., The Senior TSOC Engineer will take on expanded leadership responsibilities, including mentoring and training other TSOC Engineers alongside students, and providing strategic guidance across security operations and research enablement. The Senior TSOC Engineer will ensure security policies and procedures adhere to industry standards and compliance requirements. In addition, this position is responsible for leading the response for major security threats or breaches, coordinating remediation efforts.

The Computer Science (CS) Department in the College of Arts and Sciences at the University of Oregon offers BS, MS, and PhD degrees in Computer Science as well as BS and MS degrees in cybersecurity (starting Fall 2026). Instruction is provided by over 20 tenure track faculty and teaching professors. The department serves approximately 600 undergraduate and 90 graduate majors, as well as offering several core education classes in the discipline. The primary research foci of the tenure track faculty are high-performance computing, data science, networking, and distributed systems with cross-cutting concerns of security and privacy., * Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field AND two (2) years of relevant experience in Cybersecurity; OR

• Bachelor's degree in another field AND three (3) years of relevant experience in Cybersecurity; OR

• Six (6) years of relevant experience in Cybersecurity. To qualify as a Senior TSOC Engineer:

• Master's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field AND five (5) years of relevant experience in Cybersecurity; OR

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field AND seven (7) years of relevant experience in Cybersecurity; OR

• Bachelor's degree in another field AND eight (8) years of relevant experience in Cybersecurity; OR

• Nine (9) years of relevant experience in Cybersecurity. Expertise in two or more of the following IT Security domains is considered as relevant experience: Data Security, Digital Forensics, Incident Response and Analysis, IT Systems and Operations, Network Security, Systems and Applications Security, Vulnerability Management, Penetration Testing, or Cloud Security. Professional Competencies

• Ability to work effectively with students and faculty from diverse backgrounds and create effective relationships and positive interactions.

• Excellent problem-solving skills.

• Excellent communication skills, including the ability to explain technical concepts to audiences with a wide range of technical skills.

• Ability to adapt within a rapidly changing technical environment.

• Ability to work independently and in a team-oriented, collaborative environment.

• Ability to perform duties in a way that advances and supports the department and university's mission., Preferred Qualifications for TSOC Engineer:

• Experience with information security event triage.

• Experience working with a Security and Information Event Management product.

• Experience with enterprise information security forensic tools.

• Experience performing vulnerability scans and malware analysis in a professional environment.

• Experience with Network Access Control (NAC) systems.

• Experience in any of several programming languages (e.g., Python, Perl, Ruby, Java, C, shell-scripting).

• Experience with operating Intrusion Detection and Intrusion Prevention Systems (e.g., FireEye, SNORT, BRO).

• Experience with operating Vulnerability Assessment and Penetration Testing tools (e.g., Nessus, NMAP, Qualys, Nexpose, Metasploit).

• Working knowledge of laws, regulations and standards affecting information technology security in a higher education environment, including PCI-DSS, HIPAA, HEOA, FERPA, DMCA, and GDPR.

• Understanding of the NIST Cybersecurity Framework, ISO 27002, NIST SP-800 series controls or similar frameworks/standards.

• Two (2) years of Experience in an academic campus IT environment. Preferred Qualifications for Senior TSOC Engineer include the above plus:

• Two (2) additional years of Experience in an academic campus IT environment.

• Experience with leading large-scale security initiatives, such as implementing a new security framework or migrating systems to the cloud.

• Experience with designing and building the security infrastructure, including firewalls, intrusion detection systems, and access controls

• Experience with leading the response to major security threats or breaches, coordinating efforts to minimize damage and restore systems.

• Experience with creating and enforcing security policies and procedures, ensuring the organization adheres to industry standards and compliance requirements.

• Experience with guiding and training junior engineers and other team members, sharing their expertise and fostering a culture of security.

To provide transformative experiential learning opportunities to students in the Cybersecurity and other related programs, the CS Department is creating a Training Security Operations Center (TSOC) at the University of Oregon campus. The TSOC follows the teaching hospital model where it is managed by full time SOC engineers and staffed by resident CS students registering in the related classes. The TSOC establishes partnerships with vendors for security monitoring services and serves clients outside the university at no or low cost. It may also offer training services to other members of the community.