Cloud Defense Incident Response SME (TS/SCI Eligible)

Sentar Inc.; Quantico (MD); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible benefits package

401(k) match

Paid time off

Job summary

Sentar Inc. seeks a Cloud Response SME in Quantico, VA to act as the technical authority for cloud-based defensive cyberspace operations.

You will design, implement, and maintain high-impact threat detection across cloud environments, leveraging Tanium, Defender for Endpoint, Elastic/Kibana, and JRSS. The role requires strong incident investigations experience in cloud environments, TS/SCI eligibility, and a technical background in cloud security and DCO deployment.

Qualifications

• Five+ years in cloud incident investigations.
• Experience handling national/state intrusions.
• Experience designing cloud defense tools and detection use cases.

Responsibilities

• Lead engineering in cloud DCO environments.
• Develop and maintain cloud detection use cases for unauthorized activity.
• Investigate and respond to cloud cybersecurity incidents.
• Update TTPs and training documentation annually.

Skills

Cloud security

Incident response

DCO tooling

Education

Technical Bachelor's degree

Tools

Tanium

Microsoft Defender for Endpoint

Elastic/Kibana

JRSS

Job description

Sentar Inc. seeks a Cloud Response SME in Quantico, VA to act as the technical authority for cloud-based defensive cyberspace operations.

You will design, implement, and maintain high-impact threat detection across cloud environments, leveraging Tanium, Defender for Endpoint, Elastic/Kibana, and JRSS. The role requires strong incident investigations experience in cloud environments, TS/SCI eligibility, and a technical background in cloud security and DCO deployment.