Cleared Senior Security Engineer: Threat Hunting & CloudOps

World Wide Technology, Inc.; San Antonio (TX); On-site; USD 125,000 - 160,000; Full time

Benefits offered by this job

Health and Wellbeing

Profit Sharing

401k Plan with Company Matching

PTO and Holidays

Nursing Mothers Benefits

Job summary

World Wide Technology (WWT) seeks a Sr. Security Engineer to deploy, operate, and sustain cybersecurity platforms in a DoD environment at a San Antonio site. You’ll focus on platform operations, automation, threat intel integration, and security analytics support.

The role requires TS/SCI eligibility, 4+ years in security operations, and strong AWS/cloud telemetry experience, with container and Linux administration skills. On-site position with comprehensive benefits.

Qualifications

• Top Secret clearance with SCI eligibility required.
• Bachelor's degree in Cybersecurity, CS, Engineering, or related field.
• 4+ years supporting cybersecurity platforms, cyber operations environments, or enterprise IT systems.
• Experience with network detection and response (NDR) and IDS such as Zeek or Suricata.
• Experience using Elastic Stack (Elasticsearch, Logstash, Kibana), MDE, Trellix, or Tanium to ingest, correlate, and analyze security telemetry and develop queries and dashboards.
• Threat hunting in AWS using CloudTrail and VPC Flow Logs; familiarity with HashiCorp Boundary for secure access to investigative systems.
• Experience with Docker, Podman, or Kubernetes for deployments.
• Experience with Type 1 hypervisors, VMs, EC2, and Linux administration.
• Experience supporting security products or security operations workflows.
• Minimum 4 years’ DoW incident response and threat hunting.
• Familiarity with MITRE ATT&CK framework.
• AWS API integration experience and AWS Cloud Certification.

Responsibilities

• Support deployment, configuration, API integration and sustainment of cloud-based cyber platform components.
• Maintain and troubleshoot Linux-based applications and services in containers or VMs.
• Maintain and troubleshoot network forensics technologies like Zeek and Suricata.
• Develop automation scripts to support platform operations and security analytics.
• Integrate threat intelligence data sources and detection workflows aligned with MITRE ATT&CK.
• Assist with automated attack kill chain analysis and security event correlation.
• Support cybersecurity operations teams with platform API integration, troubleshooting, performance, and maintenance.

Skills

Security clearance

MITRE ATT&CK

Education

Bachelor's degree in Cybersecurity/CS/Engineering

DoD 8570 IAT II certification

AWS Cloud Certification

Tools

Zeek

Suricata

Elasticsearch

Logstash

Kibana

MDE

Trellix

Tanium

CloudTrail

VPC Flow Logs

HashiCorp Boundary

Docker

Podman

Kubernetes

Linux

EC2

Job description

World Wide Technology (WWT) seeks a Sr. Security Engineer to deploy, operate, and sustain cybersecurity platforms in a DoD environment at a San Antonio site. You’ll focus on platform operations, automation, threat intel integration, and security analytics support.

The role requires TS/SCI eligibility, 4+ years in security operations, and strong AWS/cloud telemetry experience, with container and Linux administration skills. On-site position with comprehensive benefits.