Cybersecurity Operations Engineer

GovCIO LLC seeks a Senior CSOC Support Engineer to bolster cybersecurity operations for federal customers. In this role, you’ll support a 24x7 Cyber Security Operations Center by managing and tuning SIEM and security tools, integrating new data sources, and improving alert fidelity. You’ll troubleshoot complex issues, guide junior analysts, and collaborate with engineers to refine detection use cases and automation. You’ll also document playbooks, liaise with government stakeholders, and help drive continuous improvements that strengthen mission-critical federal networks and systems against evolving cyber threats., * Support and enhance tools and workflows for a 24x7 Cyber Security Operations Center (CSOC).

• Administer, tune, and integrate SIEM and other security platforms to improve alert quality.
• Troubleshoot complex security tooling and data ingestion issues.
• Develop and maintain detection content, runbooks, and standard operating procedures.
• Collaborate with analysts, engineers, and government stakeholders on incident handling and improvements.
• Mentor junior CSOC staff on tools, processes, and best practices.
• Monitor system health and performance of security infrastructure.
• Support automation initiatives to streamline triage and response activities.

• Cybersecurity operations
• SIEM tools (Splunk/Elastic/etc.)
• IDS/IPS management
• Incident detection and triage
• Linux/Windows administration
• Network security and TCP/IPSecurity automation and scripting
• Vulnerability management
• Ticketing and ITSM tools
• Documentation and reporting