Staff Detection Security Operations Engineer
Core
Leading design and implementation of operational excellence, threat monitoring, detection, and security data analytics across multi-cloud environments for federal and commercial customers.
Role type
Staff Detection Security Operations Engineer (IC)
Builds
Threat monitoring and detection services supporting FedRAMP-authorized Cloud Service Providers
Domain
Cybersecurity, Cloud Infrastructure (AWS, Azure, GCP), Compliance (FedRAMP)
Required skills
Multi-cloud architecture, Detection engineering (SQL, KQL, Sigma, YARA), Incident response, Infrastructure automation (IaC), Observability (Prometheus, Grafana, Datadog), Python/Bash scripting, SIEM management, Kubernetes, CI/CD pipelines
Preferred skills
FedRAMP/NIST 800-53 controls knowledge, AWS Athena, System hardening, Disaster recovery planning
Technologies
AWS, Azure, GCP, Kubernetes, Prometheus, Grafana, Datadog, SIEM, Python, Bash, SQL, KQL, Sigma, YARA
Responsibilities
Design security architectures for FedRAMP-aligned environments; Lead complex security assessments and root cause analysis; Guide configuration of core security tooling (SIEM, EDR, logging); Develop automation and infrastructure-as-code patterns; Own incident management lifecycle and triage; Drive observability improvements and system reliability strategies; Mentor junior engineers and cross-functional teams.
Seniority
Staff, hands-on IC with strategic leadership
