Posted today
Secret
$135,000 - $145,000
Unspecified
Remote/Hybrid• (Off-Site/Hybrid)
Description
Are you looking to advance your IT career in being a Resident Engineer? Let's chat and see if we are a good match!
Opportunity:
VSO is seeking a resource to perform Resident Engineer (Extended Expertise) support focused on Endpoint Protection, including Incident Response, Threat Hunting, Splunk log parsing, and XDR, while supporting cloud environments across AWS, Azure, and GCP, and leveraging scripting (Python/PowerShell), Linux, and networking to troubleshoot and optimize the deployment. In this role, you will be responsible for supporting the customer by providing endpoint protection and response expertise, including incident response, threat hunting, and SOC support, as well as assisting with Splunk log parsing, XDR deployment, and cloud security monitoring across AWS/Azure/GCP. The engineer will also help with customer enablement, troubleshooting, and best-practice guidance to ensure the solution is fully operational and delivering value.
Requirements
More About VSO: VSO is a hybrid cloud and managed services consulting firm. Much of VSO's success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers
Salary Description
$135,000.00 - $145,000.00
Are you looking to advance your IT career in being a Resident Engineer? Let's chat and see if we are a good match!
Opportunity:
VSO is seeking a resource to perform Resident Engineer (Extended Expertise) support focused on Endpoint Protection, including Incident Response, Threat Hunting, Splunk log parsing, and XDR, while supporting cloud environments across AWS, Azure, and GCP, and leveraging scripting (Python/PowerShell), Linux, and networking to troubleshoot and optimize the deployment. In this role, you will be responsible for supporting the customer by providing endpoint protection and response expertise, including incident response, threat hunting, and SOC support, as well as assisting with Splunk log parsing, XDR deployment, and cloud security monitoring across AWS/Azure/GCP. The engineer will also help with customer enablement, troubleshooting, and best-practice guidance to ensure the solution is fully operational and delivering value.
Requirements
- 10+ years of relevant, professional experience
- Endpoint protection deployment, operationalization, troubleshooting, training experience
- Experience as a Security Incident Responder or SOC analyst/manager
- Familiarity with cloud technologies, providers (GCP, AWS, Azure), use-cases
- Time to Value - Analyze customer requirements, provide guidance & assistance throughout the customer lifecycle to ensure a quick and successful product deployment
- Product Expert - Act as the product SME, working together with product and engineering teams ensuring our customers and partners get the most out of our products
- Drive Product Adoption - Continuous contact with customers to expand adoption of our product by utilizing new features and developing additional innovative use cases
- Networking experience in TCP/IP, OSI Model, troubleshooting, analysis
- Experience in customer-facing roles
- Familiarity with machine learning and its various applications within cybersecurity
- Familiarity with the different enterprise security and IT products, processes, and ecosystem
- Threat hunting and detection engineering experience of tuning alerts, development of custom BIOCs, and development of correlation rules for new log sources
- Experience with log ingestion and parsing rules for XDR
- The ability to develop and maintain scripts in Python or Powershell is a plus
- Familiarity with XQL, SQL, or a query scripting language
- Experience with SIEM tools, such as Splunk
- Familiarity with XDR APIs
- Basic Linux system administration & troubleshooting experience
- Please note that pursuant to a government contract, this specific position requires U.S. citizenship status.
- You are an excellent communicator in writing and speaking.
- You have the ability to work independently but also value teamwork.
- Your problem-solving skills are excellent.
- You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
- You seek a community of virtue-centered co-workers and clients.
More About VSO: VSO is a hybrid cloud and managed services consulting firm. Much of VSO's success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers
Salary Description
$135,000.00 - $145,000.00
group id: 91127951