[Hiring] Cyber Security Engineer @Net2Source

Role Description

We are seeking supporting the GSA ETSNext initiative and is seeking skilled Security Engineers to join our cybersecurity team. This role is ideal for professionals with a solid background in security operations, threat detection, and incident response. Candidates should be proactive, collaborative, and comfortable working in a structured, fast-paced environment.

Key Responsibilities

• Monitoring & Threat Analysis (30%)
  • Continuously monitor systems and networks for suspicious or abnormal activity.
  • Analyze security alerts and differentiate between legitimate threats and false positives.
• Incident Response & Mitigation (25%)
  • Lead efforts for containment, eradication, and recovery of cybersecurity incidents.
  • Document incidents and develop post-incident reports and recommendations.
• Detection & SIEM Optimization (20%)
  • Tune and refine SIEM/EDR detection rules (Sumo Logic preferred).
  • Integrate new data sources to enhance detection capabilities and reduce false positives.
• Security Reporting & Trend Analysis (15%)
  • Produce regular reports (weekly/monthly) on incident activity, threat trends, and security posture.
  • Provide insights for ongoing improvements to security operations.
• Communication & Cross-Team Collaboration (10%)
  • Participate in internal meetings, threat intelligence sessions, and cross-functional syncs.
  • Maintain clear documentation and facilitate effective communication within the team.

Qualifications

• Minimum 2 years of experience in security operations or cybersecurity engineering.
• Proficient with SIEM platforms (Sumo Logic preferred).
• Skilled in tuning alert thresholds and creating detection rules.
• Familiar with endpoint detection and response tools (e.g., CrowdStrike).
• Capable of analyzing firewall, DNS, and proxy logs.
• Experienced in handling escalated security alerts.
• Strong understanding of security incident triage and mitigation.
• Excellent verbal and written communication skills.
• Ability to work independently and proactively.

Preferred Qualifications

• Scripting experience (Python or PowerShell) for automation tasks.
• Exposure to threat intelligence platforms and processes.
• Familiarity with compliance frameworks such as NIST 800-53, ISO 27001, FedRAMP.
• Relevant certifications (e.g., Security+, GSEC, GCIA, GCIH, or equivalent).