Security Engineering Manager - Remote

1w1 week ago

ECS

US · Full-time · $170,000 – $200,000

About this role

ECS is seeking a Security Engineering Manager to work remotely. At ECS Federal, we're driven by a commitment to excellence and innovation in solving complex challenges. Our mission is to secure and optimize the most critical commercial, government, defense, and intelligence projects.

The Security Engineering Manager leads the security engineering function that supports the Everforth Security Operations Center (SOC). This role oversees the design, implementation, and continuous improvement of technologies, detections, telemetry pipelines, and automation capabilities. It ensures the reliability, scalability, and operational effectiveness of SOC technology platforms and detection capabilities.

This role reports directly to the SOC Director and works closely with the SOC Manager, enterprise IT teams, and platform owners. Responsibilities include maintaining enterprise visibility and continuously improving the organization’s detection and response capabilities. Collaboration enables effective enterprise security monitoring and incident detection.

Join a team of dynamic professionals in a collaborative and empowering environment. Leverage the latest technologies and insights to make a real-world impact. Be part of a forward-thinking organization that values your expertise and supports your professional growth.

Requirements

Experience leading security engineering functions in a SOC environment
Expertise in managing SIEM platforms and data pipelines
Knowledge of endpoint detection and response (EDR) technologies
Proficiency in security telemetry onboarding, normalization, and integration
Skills in developing security automation and orchestration
Ability to provide engineering support for SOC investigations and incident response
Experience developing security technology roadmaps
Collaboration with enterprise IT, cloud, and infrastructure teams

Responsibilities

Oversee the operation, maintenance, and optimization of core SOC security platforms including SIEM, endpoint detection and response (EDR), and related security monitoring technologies
Ensure enterprise security telemetry sources are properly onboarded, normalized, and integrated into the SOC monitoring environment
Manage the performance, reliability, and data pipelines associated with the SIEM platform, ensuring high availability and effective data ingestion
Lead the implementation of automation and orchestration capabilities to improve investigation efficiency and reduce manual analyst workload
Provide technical expertise and engineering support to SOC analysts during complex investigations and incident response activities
Develop and maintain the SOC security technology roadmap to support evolving enterprise security monitoring requirements
Work closely with enterprise IT, cloud engineering, and infrastructure teams to integrate new systems, applications, and platforms into SOC monitoring
Ensure operational reliability of SOC technology platforms