IT Specialist INFOSEC (Senior Security Operations Center Engineer)

This position is located in the Department of Health and Human Services, Health Resources and Services Administration, headquartered in Rockville, Maryland. This announcement will close at 11:59 PM, on the day that 50 applications have been received or the closing date of the announcement, whichever comes first.

As an IT Specialist INFOSEC (Senior Security Operations Center Engineer), you will use your knowledge and experience to optimize business results and customer experience by: Engineer, design and implement information security threat response tools to prevent, detect, analyze and respond to malicious activity and/or anomalies across on-premises, hybrid, and cloud environments, including infrastructure­as-a-service (IaaS), platform-as-a-service (PaaS), and software-as-a-service (Saas). Develop and track security operations performance metrics (e.g., detection coverage, mean time to detect, mean time to respond, alert fidelity) to evaluate tool effectiveness, process maturity, and overall security operations performance, and provide data-driven recommendations for continuous improvement. Maintain security operations tools at optimal operating performance and provide senior-level engineering support including assessing tool effectiveness, detection quality, and operational impact using defined security operations metrics to inform optimization and modernization efforts. Perform threat detection engineering, analysis, and forensics. Develop, tune and implement threat detection analytics and CND content for on-premises and cloud environments, including identity-centric, API, and control-plane telemetry aligned with Zero Trust Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.