> Markdown version of [/jobs/ext/3005246-it-soc-engineer-i](https://www.wearedevelopers.com/jobs/ext/3005246-it-soc-engineer-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT SOC Engineer I - **Company:** ECS Corporate Services, LLC - **Location:** Fairfax, VA, United States (Remote available) - **Experience:** Expert - **Salary:** $100,000.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Antivirus, Cyber Security, Information Systems, Computer Networks, Software Tools, Phishing, Reverse Engineering, Security Information and Event Management, Information Security Management System, SC Clearance, Splunk, Plan of Action and Milestones, Vulnerability Analysis - **Published:** September 19, 2026 - **Apply:** https://www.jofdav.com/jobs/59785306-it-soc-engineer-i ## About the Role * Must possess an Active Secret clearance. * 3+ years of technical experience in Cybersecurity, maintaining IT security policies, processes, and guidance. * 8570.01/8140.03 Cybersecurity certification. (CompTia Security+CE) * Experience with mitigation of security control vulnerabilities based on Cybersecurity principles and tenets. (e.g., STIG, NIST SP 800-53, Cybersecurity Risk Management Framework, etc.). * Hands-on experience supporting Security Operations Center (SOC) operations in an enterprise environment. * Experience performing Tier 1 security alert monitoring, triage, investigation, and escalation using SIEM platforms. * Experience managing and resolving SOC ticket queues, including documenting findings, escalating incidents, and tracking issues through resolution. * Experience performing phishing email triage and analysis, including supporting phishing investigations and campaigns. * Hands-on experience with security tools and platforms such as Microsoft Defender, Splunk, Security Onion, and Absolute, or similar technologies. * Ability to analyze security alerts and events, identify potential threats, and follow established incident response and escalation procedures. ## Description * Responsible for performance of forensic analysis on various digital media devices and mediums to identify, reverse engineer, and obfuscate content related to an incident, such as malicious content. * Consult with security operations regarding cybersecurity communications and deliver or request assistance or assist with investigations. * Provide technical expertise in cyber adversary capabilities and an assessment of the intentions of these groups to conduct Computer Network Exploitation (CNE) and Computer Network Attack (CNA) against U.S. private sector and Government networks and information systems. * Consult and provide onsite and remote vulnerability assessment capabilities as a sustained, full-time program independent of incident detection, recovery, or reporting activities. * Consult both internal and external penetration and security testing which mimics real-world attacks to identify methods for circumventing the security features of an application, system, and network. * Consult with teams to detect, prevent, and respond to threats posed by malicious, negligent, or compromised insiders by maintaining in-depth visibility into the DFC Enterprise and having a means of filtering and prioritizing threat data into concise, actionable intelligence. * Provide expert security engineering and subject matter expertise to conduct market research, product evaluation, testing, configuration, deployment, operations, and maintenance support for various SOC software tools and technologies. * Advise and assist with SOC architecture activities for all DFC SOC information systems initiatives supporting all SOC tools and capabilities. * Create procedures and documentation for maintaining SOC hardware and software. * Determine and document the security impact of proposed or actual changes to the information systems and their environment of operation. * Assess the technical, management, and operational security controls employed within and inherited by the information systems in accordance with the organization defined monitoring strategy. * Facilitate and perform remediation actions based on the results of ongoing monitoring activities and the outstanding items in the POA&M. * Update the System Security Plan, SAR, and POA&Ms. Key Deliverables: updated Residual Risk Statement and Risk Acceptance Recommendation Report. * Report the security status of information systems to appropriate organizational officials on an ongoing basis. * Review the reported security status of information systems ongoing Risk Determination and Acceptance. * Incident Assessment and Response Support; work with the DFC CIRT or any other pertinent parties (including external vendors) at any DFC location to recover from any incident. Salary Range: $100,000 - $120,000 ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)