Director of Cloud Operations

Description SOC Engineer (Security Operations Center)

Location : Remote (Washington, DC area preferred)

Travel : Must be willing to attend quarterly in-person team meetings

Clearance : Ability to obtain Public Trust (Currently held preferred)

Duration : 6-month contract, potential for extension or conversion.

Position Overview

We are seeking a skilled SOC Engineer to design and maintain Security Operations Center (SOC) data feed solutions, implement SOAR capabilities, and ensure feed health through collaboration with cross-functional teams. This role requires strong cybersecurity expertise, including network security, SIEM, incident response, and threat detection. The SOC Engineer will also serve as a backup SOC Lead, managing escalations and providing leadership updates during critical incidents when the primary lead is unavailable.

Key Responsibilities

• Microsoft Sentinel Engineering : Maintain and optimize Microsoft Sentinel SIEM / SOAR solutions in alignment with client requirements, industry best practices, and federal compliance mandates.
• Data Integration : Configure and manage log / data feeds from diverse sources (e.g., Fluent Bit, Windows Events, M365, cloud services, endpoint / security platforms).
• Parsing & Normalization : Develop and refine log parsing rules using Regex, DCRs, and custom transformations for accurate and usable data in Sentinel.
• SOAR Development : Engineer automation and orchestration solutions using Microsoft Logic Apps, Azure Functions, and PowerShell / Python scripts to improve SOC efficiency and incident response.
• Threat Detection Engineering : Build, tune, and optimize analytic rules, UEBA, dashboards, and reports to enhance detection and response coverage.
• Collaboration : Work with network, endpoint, cloud, and IT operations teams to integrate new data sources and deliver actionable SOC capabilities.
• Documentation & Knowledge Transfer : Create and maintain SOC architecture documentation, onboarding guides, and automation playbooks; train SOC analysts on new tools and processes.
• Advisory & Improvement : Conduct gap analyses of SOC capabilities, recommend improvements, and contribute to SOC process maturity.
• Incident Response Support : Provide Tier 3 support and assist with complex investigations as needed.

Requirements

Required Qualifications

Preferred Qualifications

Education & Experience

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract / temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract / temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M / F / Disability / Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use.