Equiliem
SOC Engineer-
Remote Opportunity- DC area preferred.
PUBLIC TRUST
This role focuses on engineering SOC data feed solutions, implementing SOAR capabilities, and ensuring feed health through cross-team collaboration. The ideal candidate will have strong cybersecurity expertise, including network security, SIEM, incident response, and threat detection.
They will also serve as the backup SOC Lead, overseeing operations, managing escalations, and providing updates to senior leadership during critical incidents when the primary lead is unavailable.
Key Responsibilities - Microsoft Sentinel Engineering: Maintain and optimize a Microsoft Sentinel SIEM/SOAR solution in alignment with client requirements, industry best practices, and federal compliance mandates. - Data Integration: Configure and manage log/data feeds from diverse sources (e.g., Fluent Bit, Windows Events, M365, cloud services, endpoint/security platforms). - Parsing & Normalization: Develop and refine log parsing rules using Regex, DCRs, and custom transformations to ensure accurate and usable data in Sentinel. - SOAR Development: Engineer automation and orchestration solutions using Microsoft Logic Apps, Azure Functions, and PowerShell/Python scripts to improve SOC efficiency and incident response. - Threat Detection Engineering: Build, tune, and optimize analytic rules, UEBA, dashboards, and reports to improve detection and response coverage. - Collaboration: Partner with cross-functional teams (network, endpoint, cloud, IT ops) to integrate new data sources and deliver actionable SOC capabilities. - Documentation & Knowledge Transfer: Develop and maintain clear documentation of SOC architecture, log source onboarding, and automation playbooks; provide training for SOC analysts on new tools and processes. - Advisory & Improvement: Conduct gap analyses of existing SOC capabilities, recommend improvements, and contribute to SOC process maturity. - Incident Response Support: Provide Tier 3 support and assist with complex investigations when required.
Required Qualifications - U.S. Citizen with ability to obtain Public Trust clearance. - 2-5 years of experience in network defense, SOC engineering, or cybersecurity operations. - Hands-on experience with Microsoft Sentinel, including log onboarding, rule development, and automation. - Proficiency with log parsing and normalization (Regex, Fluent Bit, DCRs, KQL). - Strong scripting skills in PowerShell and/or Python for automation and data handling. - Experience configuring and maintaining data feeds for SOC visibility (cloud, endpoint, network, and on-prem). - Familiarity with incident response concepts, threat detection engineering, and SOAR workflows. - Excellent written and verbal communication skills with ability to work across technical and non-technical teams.
Preferred Qualifications - Knowledge of federal cybersecurity mandates (M-21-31, NIST Cybersecurity Framework, CISA Incident/Vulnerability Playbooks, BOD 22-01). - Experience with Microsoft Logic Apps, Azure Functions, or other SOAR development platforms. - Experience with UEBA configuration to enhance anomaly detection. - Background in AI/ML frameworks for cyber analytics. - Experience building SOC metrics, dashboards, and reporting for operational visibility. - Familiarity with M365, Azure security tools, ServiceNow workflows, and CISA CDM tools. - Relevant certifications such as CISSP, CISM, Microsoft Security Operations Analyst (SC-200), or Azure Security Engineer (AZ-500).
Education & Experience - Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience). - 5 years of progressive cybersecurity/SOC experience (engineering and operations).
About Equiliem
Equiliem believes in empowering success. It's our job to cultivate relationships that connect people and employers in a way that is inclusive, intelligent, and allows both to thrive.
Across the U.S., leading companies in healthcare, government, engineering, manufacturing, professional services, and energy rely on us for their workforce solutions. Our recruiting and HR services include contract and direct hire staffing, Payrolling/EOR, Independent Contractor Compliance, and Managed Services.
For almost 30 years, we've helped shape our industry. Today, we continue to research, ask questions, and continuously enhance the candidate journey and client experience.
Benefits
We offer a comprehensive benefits package to our employees, which includes:
Medical Insurance Vision & Dental Insurance Life Insurance 401K Commuter Benefits Employee Discounts & Rewards Payroll Payment Options EEO Employer
Equiliem is an equal opportunity employer. We do not discriminate or allow discrimination based on race, color, religion, creed, sex, age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Equiliem will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or (732) 238-6050 .
PUBLIC TRUST
This role focuses on engineering SOC data feed solutions, implementing SOAR capabilities, and ensuring feed health through cross-team collaboration. The ideal candidate will have strong cybersecurity expertise, including network security, SIEM, incident response, and threat detection.
They will also serve as the backup SOC Lead, overseeing operations, managing escalations, and providing updates to senior leadership during critical incidents when the primary lead is unavailable.
Key Responsibilities - Microsoft Sentinel Engineering: Maintain and optimize a Microsoft Sentinel SIEM/SOAR solution in alignment with client requirements, industry best practices, and federal compliance mandates. - Data Integration: Configure and manage log/data feeds from diverse sources (e.g., Fluent Bit, Windows Events, M365, cloud services, endpoint/security platforms). - Parsing & Normalization: Develop and refine log parsing rules using Regex, DCRs, and custom transformations to ensure accurate and usable data in Sentinel. - SOAR Development: Engineer automation and orchestration solutions using Microsoft Logic Apps, Azure Functions, and PowerShell/Python scripts to improve SOC efficiency and incident response. - Threat Detection Engineering: Build, tune, and optimize analytic rules, UEBA, dashboards, and reports to improve detection and response coverage. - Collaboration: Partner with cross-functional teams (network, endpoint, cloud, IT ops) to integrate new data sources and deliver actionable SOC capabilities. - Documentation & Knowledge Transfer: Develop and maintain clear documentation of SOC architecture, log source onboarding, and automation playbooks; provide training for SOC analysts on new tools and processes. - Advisory & Improvement: Conduct gap analyses of existing SOC capabilities, recommend improvements, and contribute to SOC process maturity. - Incident Response Support: Provide Tier 3 support and assist with complex investigations when required.
Required Qualifications - U.S. Citizen with ability to obtain Public Trust clearance. - 2-5 years of experience in network defense, SOC engineering, or cybersecurity operations. - Hands-on experience with Microsoft Sentinel, including log onboarding, rule development, and automation. - Proficiency with log parsing and normalization (Regex, Fluent Bit, DCRs, KQL). - Strong scripting skills in PowerShell and/or Python for automation and data handling. - Experience configuring and maintaining data feeds for SOC visibility (cloud, endpoint, network, and on-prem). - Familiarity with incident response concepts, threat detection engineering, and SOAR workflows. - Excellent written and verbal communication skills with ability to work across technical and non-technical teams.
Preferred Qualifications - Knowledge of federal cybersecurity mandates (M-21-31, NIST Cybersecurity Framework, CISA Incident/Vulnerability Playbooks, BOD 22-01). - Experience with Microsoft Logic Apps, Azure Functions, or other SOAR development platforms. - Experience with UEBA configuration to enhance anomaly detection. - Background in AI/ML frameworks for cyber analytics. - Experience building SOC metrics, dashboards, and reporting for operational visibility. - Familiarity with M365, Azure security tools, ServiceNow workflows, and CISA CDM tools. - Relevant certifications such as CISSP, CISM, Microsoft Security Operations Analyst (SC-200), or Azure Security Engineer (AZ-500).
Education & Experience - Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience). - 5 years of progressive cybersecurity/SOC experience (engineering and operations).
About Equiliem
Equiliem believes in empowering success. It's our job to cultivate relationships that connect people and employers in a way that is inclusive, intelligent, and allows both to thrive.
Across the U.S., leading companies in healthcare, government, engineering, manufacturing, professional services, and energy rely on us for their workforce solutions. Our recruiting and HR services include contract and direct hire staffing, Payrolling/EOR, Independent Contractor Compliance, and Managed Services.
For almost 30 years, we've helped shape our industry. Today, we continue to research, ask questions, and continuously enhance the candidate journey and client experience.
Benefits
We offer a comprehensive benefits package to our employees, which includes:
Medical Insurance Vision & Dental Insurance Life Insurance 401K Commuter Benefits Employee Discounts & Rewards Payroll Payment Options EEO Employer
Equiliem is an equal opportunity employer. We do not discriminate or allow discrimination based on race, color, religion, creed, sex, age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Equiliem will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or (732) 238-6050 .