Cyber Security Engineer 1

Seneca Technologies is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings’ federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs.  We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

Seneca Technologies is seeking a Cyber Security Engineer I to support Security Operations Center (SOC) operations in Orlando, FL. In this role, you will play a key part in monitoring, investigating, and responding to cybersecurity events across enterprise Linux environments utilizing Security Information and Event Management (SIEM) technologies. Working collaboratively with cybersecurity engineers and operational teams, you will help ensure the availability, integrity, and effectiveness of cybersecurity monitoring capabilities supporting mission-critical operations. The ideal candidate will possess strong analytical and technical skills with a commitment to maintaining cybersecurity standards within a dynamic Department of Defense environment.

Responsibilities include, but are not limited to:

• Perform continuous monitoring of security alerts and operational anomalies utilizing enterprise Security Information and Event Management (SIEM) technologies supporting Security Operation Center operations.
• Analyze, triage, and investigate security events generated from enterprise monitoring and security platforms.
• Monitor enterprise Linux environments, network activity, and security telemetry for anomalous or suspicious behavior.
• Perform initial cybersecurity incident investigations and document investigative findings utilizing established procedures.
• Validate alerts for accuracy and escalate advanced incidents when appropriate.
• Monitor the health and availability of security monitoring components and identify connectivity or reporting issues impacting cybersecurity operations.
• Validate successful log ingestion and identify missing or delayed log sources affecting security visibility.
• Utilize dashboards, visualizations, and reporting capabilities to identify security trends and operational anomalies.
• Assist in validating the effectiveness of existing security detections and alerting capabilities.
• Validate Linux logging requirements and security event collection for supported technologies.
• Create and maintain Standard Operating Procedures (SOPs), investigation guides, and technical documentation supporting cybersecurity operations.
• Participate in routine health checks of cybersecurity monitoring platform components supporting Network Monitoring Center operations.
• Collaborate with Cyber Security Engineers II and III during advanced incident investigations and cybersecurity initiatives.
• Support cybersecurity incident response activities as required.

Basic Qualifications:

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance is required.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical field
• 3 or more years of relevant professional experience supporting cybersecurity operations, network monitoring, enterprise Linux environments, or equivalent technical disciplines. Equivalent combinations of education, professional certifications, military service, and relevant professional experience will be considered.
• Experience performing cybersecurity alert monitoring and incident investigations.
• Experience supporting enterprise Linux environments.
• Experience utilizing enterprise monitoring or Security Information and Event Management (SIEM) technologies.
• Experience documenting investigative findings utilizing ticketing, case management, or equivalent systems.
• Ability to analyze and interpret security events to identify suspicious or malicious activity.

Desired Skills:

• An active Security+, CySA+, or equivalent cybersecurity certification satisfying applicable Department of Defense cybersecurity workforce requirements is highly preferred.
• Linux+, Elastic Certified SIEM Analyst certifications
• Experience utilizing enterprise SIEM technologies such as Elastic, Splunk, or equivalent technologies.
• Experience monitoring enterprise Linux environments, network security events, and cybersecurity telemetry.
• Familiarity with MITRE ATT&CK methodologies and cybersecurity frameworks.
• Experience utilizing Jira, Confluence, or comparable collaboration platforms.
• Experience supporting cybersecurity operations within Government, Department of Defense, or enterprise environments.
• Familiarity with cybersecurity incident response processes and investigative methodologies.
• Experience developing dashboards, visualizations, and reporting capabilities supporting cybersecurity operations.
• Experience supporting Elastic Security, Elastic Observability, Elastic Agents, or Logstash is highly desired.