Azure Cloud Security Engineer—SIEM & SOAR (Remote)

SAIC; Yorktown (VA); Remote; USD 110,000 - 160,000; Full time

Job summary

SAIC is seeking a Cybersecurity Specialist/Cloud Engineer to design, implement, and optimize Azure-based security monitoring using Sentinel and Torq workflows. This role supports a multi-tenant MSS environment for government customers and aligns with NICE Framework disciplines.

U.S. citizenship is required, with the ability to obtain a Public Trust. Remote work may be available nationwide in the United States.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; or 2+ years related experience with a degree.
• Hands-on experience with Microsoft Sentinel (rules/incidents hunting) and Azure security/logging services.
• Proficiency in KQL and JSON-based detections; scripting in PowerShell, Python, or Bash.
• U.S. citizen able to obtain and maintain a Public Trust clearance.

Responsibilities

• Administer and optimize Microsoft Sentinel as the core SIEM with analytics, incidents, and hunts.
• Engineer and manage log ingestion from Azure and hybrid sources into Sentinel.
• Build and maintain Torq automation playbooks for alert enrichment and incident response.
• Implement automation using Azure Logic Apps and related Azure services.
• Design secure Azure cloud architectures aligned with NIST 800-53, FedRAMP, CJIS.
• Support incident response and forensics with logging, KQL queries, and reconstruction.
• Research and recommend new security tools in Azure/Sentinel/Torq and aid strategic planning.
• Produce clear documentation of configurations, assessments, and remediation actions.

Skills

Sentinel

KQL

JSON-based detections

PowerShell

Python

Bash

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or related field

Master's degree in a related field

Tools

Torq

Azure

Azure Logic Apps

Microsoft Sentinel

Job description

SAIC is seeking a Cybersecurity Specialist/Cloud Engineer to design, implement, and optimize Azure-based security monitoring using Sentinel and Torq workflows. This role supports a multi-tenant MSS environment for government customers and aligns with NICE Framework disciplines.

U.S. citizenship is required, with the ability to obtain a Public Trust. Remote work may be available nationwide in the United States.