Senior Cybersecurity Engineer, Defense Operations
Core
Senior resource for security monitoring, system ownership, and continuous improvement of on-premise, SaaS, and cloud platform services, acting as a frontline incident responder.
Role type
Senior IC cybersecurity engineer (operations & incident response)
Builds
Security monitoring, incident response, and vulnerability management for Defense Operations platforms
Domain
Cybersecurity operations, cloud security, and managed detection and response (MDR)
Required skills
incident response, SIEM administration, EDR administration, vulnerability management, threat hunting, cloud security, scripting (Python/bash/Powershell), NIST/ISO frameworks
Preferred skills
identity and access management (IAM), Terraform
Technologies
Splunk, Microsoft, Crowdstrike, AWS, SIEM, EDR, SEG, CNAPP, IAM, Okta, SSO, SAML
Responsibilities
Act as a frontline incident responder from detection to recovery; collaborate with 3rd-party MDR providers for triage and threat hunting; administer and optimize core security toolset (SIEM, EDR, cloud security, email security, vulnerability management); enhance cloud security operations; drive teams to identify and mitigate risks; provide technical strategy for vulnerability management; design and operationalize security playbooks and runbooks
Seniority
Senior, hands-on IC
