Engineer, Cybersecurity Operations Center - Overnight Shift, T-Mobile

T-Mobile

Location:
United States, Bellevue ▼
Overland Park
Frisco

Category:
IT - Administration

Contract Type:
Not provided

Salary:

79900.00 - 144100.00 USD / Year

Save Job

Apply Position

Job Description:

Come work with the Cyber Security Operations Center (CSOC) team! This is a full-time, onsite position working four (4) overnight 10-hour shifts per week; includes a 10% shift differential for overnight hours.

Job Responsibility:

Monitor incoming event queues for potential security incidents per operational procedures
Perform triage, analysis, and response of security alerts to resolve and initiate appropriate courses of action, with critical issues as defined by established procedures
Collect and organize alert, event and triage data to produce reports to provide feedback to existing content, advise new content, and measure relevant KPIs
Provide support for and collaboration with higher-tier support teams to investigate raised incidents
Assist in the development of new security operations processes as well as the refinement or improvement of existing processes
Monitor CSOC ticket (or email) queue for potential event reporting from outside entities and individual users
Maintain CSOC shift logs with relevant activity from current shift
Document investigation case notes, ensuring relevant details are passed to CIRT for raised incident analysis
Update or reference CSOC knowledge management repository as necessary for changes to CSOC processes and procedures and ingest CSOC daily intelligence reports and previous shift pass downs
Conduct security research and intelligence gathering on emerging threats and exploits

Requirements:

2-4 years of experience working in a large enterprise
2-4 years of experience as a SOC or Incident Response investigator or similar work experience
Conversant with cyber security intrusion analysis concepts and techniques
Understanding of security incident investigation and log analysis
Experience investigating security incidents, threats and vulnerabilities
Shown knowledge of networking (TCP/IP, topology, OSI model and network forensics), operating systems (Windows/MacOS/Linux), and web technologies (web applications, database security, web servers)
Knowledge of federal & compliance regulations e.g. SOX, PCI & CPNI
Knowledge of Scripting tools (Python/Perl/Shell/HTML/PHP)
Ability to read and understand system data, including, but not limited to, security event logs, system logs, and firewall logs
High degree of attention to detail
Presentation skills to large and small audiences
Strong verbal and written communication skills

Nice to have:

Experience supporting Cyber Security Operations in a large enterprise environment
Experience with SIEM & Log Management solutions
Experience with cloud security, telecom security, data protection
Experience with enterprise systems or network administration
CCNA Security, GCIA, GCIH or other related security certifications

What we offer:

Competitive base salary and compensation package
Annual stock grant
Employee stock purchase plan
401(k)
Access to free, year-round money coaches
Medical, dental and vision insurance
Flexible spending account
Paid time off
Up to 12 paid holidays
Paid parental and family leave
Family building benefits
Back-up care
Enhanced family support
Childcare subsidy
Tuition assistance
College coaching
Short- and long-term disability
Voluntary AD&D coverage
Voluntary accident coverage
Voluntary life insurance
Voluntary disability insurance
Voluntary long-term care insurance
Mobile service & home internet discounts
Pet insurance
Access to commuter and transit programs

Additional Information:

Job Posted:
April 25, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Engineer, Cybersecurity Operations Center - Overnight Shift