Training Security Operations Center; TSOC Engineer or Senior Engineer

Training Security Operations Center (TSOC) Engineer or Senior Engineer

Department: CAS Computer Science

Appointment Type and Duration: Regular, Ongoing

Salary: Commensurate with experience

Compensation Band: OS-OA10-Fiscal Year

FTE: 1.0

Position open until filled.

The TSOC Engineer plays a critical role in designing, implementing, and managing cybersecurity systems and policies within the TSOC infrastructure and for its clients. This includes developing secure systems aligned with TSOC design principles, determining policies for network security devices such as firewalls, VPNs, and access control mechanisms, and leading various technical projects and initiatives.

The TSOC Engineer will supervise and train students across all phases of security operations as part of their experiential learning opportunity, enable research by sharing data, providing access to TSOC environments, and sharing pain points that provide opportunities for innovation and managing security analysis tasks for TSOC students and employees. The TSOC engineer may also interact with TSOC clients to understand and address their cybersecurity concerns.

• Perform cyber defense incident triage.
• Perform real‑time cyber defense.
• Correlate data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
• Interpret information collected and analyze malware.
• For Senior TSOC Engineer: lead the response for major security threats or breaches, coordinating remediation efforts.

TSOC Engineer:

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field AND two (2) years of relevant experience in Cybersecurity.
• Bachelor's degree in another field AND three (3) years of relevant experience in Cybersecurity.
• Six (6) years of relevant experience in Cybersecurity.

Senior TSOC Engineer:

• Master's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field AND five (5) years of relevant experience in Cybersecurity.
• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field AND seven (7) years of relevant experience in Cybersecurity.
• Bachelor's degree in another field AND eight (8) years of relevant experience in Cybersecurity.
• Nine (9) years of relevant experience in Cybersecurity.

Expertise in two or more of the following IT Security domains is considered relevant experience:
Data Security, Digital Forensics, Incident Response and Analysis, IT Systems and Operations, Network Security, Systems and Applications Security, Vulnerability Management, Penetration Testing, or Cloud Security.

• Ability to work effectively with students and faculty from diverse backgrounds and create effective relationships and positive interactions.
• Excellent problem‑solving skills.
• Excellent communication skills, including the ability to explain technical concepts to audiences with a wide range of technical skills.
• Ability to adapt within a rapidly changing technical environment.
• Ability to work independently and in a team‑oriented, collaborative environment.
• Ability to perform duties in a way that advances and supports the department and university's mission.

• Experience with information security event triage.
• Experience working with a Security and Information Event Management product.
• Experience with enterprise information security forensic tools.
• Experience performing vulnerability scans and malware analysis in a professional environment.
• Experience with Network Access Control (NAC) systems.
• Experience in any of several programming languages (e.g., Python, Perl, Ruby, Java, C, shell‑scripting).
• Experience with operating Intrusion Detection and Intrusion Prevention Systems (e.g., Fire Eye, SNORT, BRO).
• Experience with operating Vulnerability Assessment and Penetration Testing tools (e.g., Nessus, NMAP, Qualys, Nexpose, Metasploit).
• Working knowledge of laws, regulations and standards affecting information technology security in a higher education environment, including PCI‑DSS, HIPAA, HEOA, FERPA, DMCA, and GDPR.
• Understanding of the NIST Cybersecurity…