This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
About the position
The Senior Cloud Security Engineer at SAIC is responsible for performing Cloud Security Engineering and Administration duties, focusing on providing Cybersecurity services for a major state and local government customer. This role involves technical leadership in Azure Portal and Sentinel SIEM engineering, as well as supporting incident response functions. The engineer will manage the technical aspects of running and maintaining a SIEM, authoring and tuning correlation rules, and developing PowerBI dashboards. Additionally, the position includes mentoring less experienced cloud security specialists and participating in incident response activities.
Responsibilities
- Perform Cloud Security Engineering and Administration duties for Cybersecurity services.
- Lead technical efforts in Azure Portal and Sentinel SIEM engineering.
- Support incident response functions and prepare for cybersecurity events.
- Manage user, license, and VM administration in Azure Portal.
- Develop and troubleshoot analytics rules in Sentinel SIEM.
- Create PowerBI dashboards for various customers.
- Automate tasks related to threat intelligence and incident detection.
- Provide coaching and guidance for junior SOC personnel.
Requirements
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field.
- Minimum of five years of relevant experience in cybersecurity.
- Demonstrated experience with Microsoft Sentinel and Log Analytics.
- Excellent oral and written communication skills.
- Experience with syslog-based logging server-side configurations.
- Ability to obtain Cybersecurity First Responder certification within 180 days of employment.
Nice-to-haves
- Experience with ITIL or ITIL Foundation certification.
- Unix/Linux and/or Windows System Administration experience.
- Familiarity with syslog-based logging client-side configurations.
- Experience with EnCase Digital Forensics/Investigator and Endpoint Security solutions.
- Industry-recognized cybersecurity certifications such as ISC2 or SANS/GIAC.
- Familiarity with Cyber Threat Intelligence (CTI) programs.
Benefits
- On-the-job training of the customer operating environment.
- Strong teamwork-based environment for collaboration.
- Flexible work schedule.
- Reimbursement for selected technical training and certification.
