Tier 2 Cybersecurity Engineer

About the role

Join a nationally recognized, award‑winning cybersecurity team delivering high‑impact technical solutions for DoD contractors. You will work on advanced threat investigations, incident response, and continuous improvement of SOC processes.

Key responsibilities

• Investigate and triage security alerts from SIEM, EDR, firewalls, Sentinel and other tools, distinguishing true positives from false positives.
• Lead incident response actions including containment, eradication, recovery, and produce clear customer‑facing incident summaries.
• Monitor SOC MDR alerts, provide contextual enrichment, and act as escalation point for complex detections.
• Mentor Tier 1 analysts, participate in tabletop exercises, and recommend improvements to SOC tooling and workflows.

Required profile

• 5+ years of hands‑on SOC, incident response, or security operations experience.
• Strong understanding of endpoint security, email/phishing attack chains, and identity‑based attacks.
• Ability to document technical findings clearly for both technical and non‑technical audiences.

Required skills

• Experience with SIEM platforms (querying, investigations, rule tuning).
• Proficiency with endpoint detection and response (EDR) tools.
• Knowledge of firewalls, Sentinel, and other security telemetry sources.
• Valid CompTIA Security+ certification (preferred: GCIH, CompTIA CySA+).

What we offer

• Comprehensive health, dental, vision, and life insurance (company‑paid $50,000 policy).
• 128 hours of PTO annually, disability plans, and retirement benefits.
• Performance bonuses, salary increase potential via certifications, commissions for parts sold.
• Free snacks, paid certifications, and a collaborative team environment.