Senior Cloud Security Engineer

$80,001 - $120,000/Yr

SAIC - Washington, DC

Full-time - Senior

Onsite - Washington, DC

10,001+ employees

Professional, Scientific, and Technical Services

About the position

SAIC is seeking a Senior Cloud Security Engineer to perform Cloud Security Engineering and Administration duties for a major state and local government customer. This role involves being a technical leader in Azure Portal and Sentinel SIEM engineering, supporting incident response functions, and mentoring less experienced cloud security specialists. The position is fully remote and part of a 24x7x365 security operations team.

Responsibilities

• Perform Cloud Security Engineering and Administration duties.
• Lead technical aspects of Azure Portal and Sentinel SIEM engineering.
• Support incident response functions and prepare for cybersecurity events.
• Author and tune correlation rules for SIEM.
• Develop and maintain PowerBI dashboards and reports.
• Manage Azure resources in support of the SIEM.
• Automate tasks related to threat intelligence and incident detection/response.
• Provide coaching and guidance for junior SOC personnel.

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a relevant field.
• Minimum of five years of relevant experience in cybersecurity.
• Demonstrated experience with Microsoft Sentinel and Log Analytics.
• Excellent oral and written communication skills.
• Experience with syslog-based logging server-side configurations and Azure portal administration.
• Ability to obtain Cybersecurity First Responder certification within 180 days of employment.

Nice-to-haves

• Experience with ITIL, ITIL Foundation or higher certification.
• Unix/Linux and/or Windows System Administration experience.
• Familiarity with syslog-based logging client-side configurations.
• Experience with EnCase Digital Forensics/Investigator and Endpoint Security solutions.
• ISC2, SANS/GIAC, and other industry-recognized cybersecurity certifications.

Benefits

• On-the-job training of the customer operating environment and service provider tools.
• Strong teamwork-based environment for collaboration.
• Flexible work schedule.
• Reimbursement for selected technical training and certification.