Senior Cybersecurity Engineer, Defense Operations
Core
Senior resource for security monitoring, system ownership, and continuous improvement of on-premise, SaaS, and cloud platform services, acting as a frontline incident responder.
Role type
Senior IC cybersecurity engineer (operations & incident response)
Builds
Security monitoring, incident response, and vulnerability management for Defense Operations platforms
Domain
Cybersecurity operations, cloud security, and managed detection and response (MDR)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
incident response, SIEM administration, EDR administration, vulnerability management, threat hunting, cloud security, scripting (Python/bash/Powershell), NIST/ISO frameworks
Preferred skills
identity and access management (IAM), Terraform
Technologies
Splunk, Microsoft, Crowdstrike, AWS, SIEM, EDR, SEG, CNAPP, IAM, Okta, SSO, SAML
Responsibilities
Act as a frontline incident responder from detection to recovery; collaborate with 3rd-party MDR providers for triage and threat hunting; administer and optimize core security toolset (SIEM, EDR, cloud security, email security, vulnerability management); enhance cloud security operations; drive teams to identify and mitigate risks; provide technical strategy for vulnerability management; design and operationalize security playbooks and runbooks
Seniority
Senior, hands-on IC