{"id":3121455,"url":"https://alion.io/job/amentum-soc-engineer-2","title":"SOC Engineer","company":{"id":14861,"name":"Amentum","domain":"amentum.com","url":"https://alion.io/company/amentum","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":106,"ghost_share":0,"stale_share":0.991,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbia, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":145000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Bash","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Hat","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"VMWare","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Corelight","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"Hyper-V","optional":true},{"name":"Logstash","optional":true},{"name":"NIST 800-53","optional":true},{"name":"Podman","optional":true},{"name":"Security Onion","optional":true},{"name":"Suricata","optional":true},{"name":"Zeek","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-18T00:00:00Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-10-25T10:59:41Z","board_verified":true,"closed_at":null,"days_open":39,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":39},"description":"Come be a part of an exciting and ever-changing program that provides a comprehensive range of state-of-the-art solutions and hands-on assistance in designing, implementing, managing, and sustaining operations across various network environments for our customer.\nWe provide an environment that fosters and supports innovation and valuing “outside-the-box” thinking to solve complex problems. There are several training opportunities for team members that want to learn new technologies and stay current with their technical skillset. We are a highly technical group and nurture growth, with a technical culture of cross-trained teammates with opportunities to develop additional skillsets.\nWork Schedule:\n8hrs / day, 5 days per week, all onsite\nOccasional after hours work for system maintenance\nEssential Responsibilities:\nWe are seeking a highly motivated SOC Engineer to support the design, deployment, and continual improvement of enterprise Security Operations Center (SOC) capabilities. The successful candidate will serve as a key technical contributor responsible for SIEM engineering, log management architecture, threat detection development, security automation, and incident response support within classified environments.\nThis is a hands-on-keyboard position requiring expertise in deploying and maintaining security monitoring platforms, developing advanced detection capabilities, and improving the overall effectiveness of cyber defense operations. The SOC Engineer will work closely with cybersecurity analysts, incident responders, system administrators, network engineers, and customer stakeholders to enhance security visibility and defend critical mission systems against evolving threats.\nKey Responsibilities include:\nDesign, implement, configure, and maintain SIEM, log management, and security monitoring solutions supporting enterprise cybersecurity operations.\nEvaluate existing SOC architectures and recommend improvements to increase operational effectiveness, scalability, and threat visibility.\nEngineer and optimize log collection pipelines to ensure comprehensive security event coverage across network, system, application, and cloud environments.\nDevelop, test, tune, and maintain detection content, including correlation searches, threat detections, alerts, signatures, and analytics.\nIdentify gaps in detection coverage and implement solutions aligned with current threat intelligence and adversary techniques.\nCreate and maintain SOC playbooks, standard operating procedures, and incident response workflows.\nSupport security incident investigations through log analysis, endpoint analysis, malware analysis, and forensic data collection.\nDesign and implement security automation and orchestration capabilities to reduce analyst workload and improve response times.\nDevelop metrics, dashboards, and reporting capabilities to measure SOC performance, alert fidelity, detection effectiveness, and operational health.\nParticipate in threat hunting activities to identify stealthy or previously undetected malicious activity.\nSupport malware analysis efforts, including static and dynamic analysis techniques and reverse engineering activities when required.\nAuthor scripts and automation tools using languages such as Python, PowerShell, or Bash to improve SOC efficiency and detection capabilities.\nDocument technical architectures, operational procedures, engineering designs, and implementation plans.\nProvide technical recommendations regarding emerging security technologies, tools, and best practices.\nCollaborate with customer stakeholders to understand mission requirements and translate those requirements into technical solutions.\nMinimum Requirements:\n6+ years of experience supporting Security Operations Centers (SOC), cybersecurity engineering, SIEM engineering, or Information System Security Engineering (ISSE).\nExperience deploying, administering, and maintaining Splunk Enterprise Security and/or other enterprise SIEM platforms.\nStrong understanding of security event management, log management, and threat detection methodologies.\nExperience developing SIEM correlation searches, analytic rules, dashboards, and detection use cases.\nExperience supporting cybersecurity operations within classified or highly regulated environments.\nStrong knowledge of Windows and Linux operating systems, including system administration and troubleshooting.\nExperience with scripting or automation using PowerShell, Python, Bash, or similar languages.\nExperience working within virtualized and containerized environments.\nUnderstanding of common attack frameworks such as MITRE ATT&CK and cyber kill chain methodologies.\nKnowledge of incident response, digital forensics, threat hunting, and malware analysis principles.\nExperience producing technical documentation, architecture diagrams, implementation plans, and engineering reports.\nStrong communication and customer engagement skills with the ability to explain technical concepts to both technical and non-technical stakeholders.\nSecurity Clearance Required:\nTS / SCI\nMinimum Education:\nHigh School Diploma or equivalent\nPreferred\nBachelor's Degree in Information Technology, Computer Science, Engineering, or related field\nRequired Certifications:\nThis is an IAT3 level billet. Applicant must have:\nRequired IAT Certs: one or more of the following: CISM, CISSP, or equivalent senior-level baseline certification\nRequired vendor certification in one or more relevant technologies (e.g., Microsoft, VMware, Cisco, NetApp, Pure Storage, HP, Dell, Linux+, Red Hat, HBSS, ACAS). Candidates without an active certification must obtain at least one within 6 months of hire\nPreferred Qualifications: AI if applicable to your program\nExperience with Splunk Enterprise Security, Security Onion, Corelight, Zeek, Suricata, Elastic, or similar cybersecurity platforms.\nExperience with Logstash, Docker, Podman, and containerized application deployments.\nExperience integrating threat intelligence feeds into SIEM and detection platforms.\nFamiliarity with SOAR technologies and security automation frameworks.\nExperience performing malware analysis, reverse engineering, or digital forensics.\nExperience supporting DoD, Intelligence Community, or classified enterprise networks.\nExperience with Red Hat Enterprise Linux administration.\nFamiliarity with cloud security platforms including AWS, Azure, or Google Cloud.\nExperience with NIST RMF, NIST 800-53, STIGs, CIS Benchmarks, or equivalent compliance frameworks.\nExperience with VMware, Hyper-V, Nutanix, or other enterprise virtualization platforms.\nExperience with enterprise backup, disaster recovery, and business continuity solutions.\nPrior Security Operations Center experience\nExperience with Zero Trust architectures\nPrior Military experience\nCompensation Details:\n$145,000 - $190,000The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.\nBenefits Overview:\nOur health and welfare benefits are designed to support you and your priorities. Offerings include:\nHealth, dental, and vision insurance\n\nPaid time off and holidays\n\nRetirement benefits (including 401(k) matching)\n\nEducational reimbursement\n\nParental leave\n\nEmployee stock purchase plan\n\nTax-saving options\n\nDisability and life insurance\n\nPet insurance\n\nNote: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.\nOriginal Posting:\n09/18/2026 - Until FilledAmentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.\nAmentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.","description_format":"text","description_chars":8928,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Military Logistics","Business Process Outsourcing (BPO)","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-23T00:37:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":122500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.471,"p_room":0.35,"age_days":38,"expected_fill_days":17,"reasons":["conf:18","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":false},"html_url":"https://alion.io/job/amentum-soc-engineer-2","json_url":"https://alion.io/job/amentum-soc-engineer-2.json","meta":{"generated_at":"2026-10-27T00:56:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1288,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14861},"rest":"https://alion.io/mcp/rest/get_company?id=14861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famentum-soc-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famentum-soc-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famentum-soc-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amentum-soc-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famentum-soc-engineer-2"}]}