Incident Response/SIEM Engineer SME (required active Top Secret)

Please share resume to rajesh at delviom dot com

Required Qualifications:

• Active Top Secret [OR] Top Secret (TS) clearance with SCI eligibility/access.
• 8+ years’ experience managing or supporting Security Operations Center (SOC) operations.
• Hands-on experience with SIEM technologies, including security event monitoring, alert analysis, correlation, investigation, and escalation.
• Experience with Endpoint Detection and Response (EDR) technologies and endpoint security investigations.
• Experience monitoring and analyzing IDS/IPS alerts and network security events.
• Strong experience with Digital Forensics and Incident Response (DFIR), including incident investigation, evidence collection, forensic analysis, containment, and remediation.
• Experience managing and coordinating cybersecurity incidents, including escalation, documentation, stakeholder communication, and post-incident activities.
• Ability to lead SOC analysts, coordinate shift coverage, prioritize incidents, and ensure appropriate escalation and response procedures are followed.
• Strong understanding of cybersecurity threats, attack techniques, indicators of compromise (IOCs), and incident response processes.
• Strong written and verbal communication skills, with the ability to communicate security incidents and operational status to technical teams and management.

Thank you

Rajesh