Cloud Defense Response Specialist

Sentar; Virginia (MN); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical/Dental/Vision (Voluntary)

FSA options

Life insurance

Disability insurance

401(k) match

PTO and leave programs

Holiday schedule

Job summary

Sentar is seeking a Cloud Response SME in Quantico, VA to serve as the technical authority for cloud defense, incident investigations, and DCO tooling across government cloud environments.

Responsibilities include developing cloud detection use cases, leading investigations, designing new capabilities, and updating TTPs and training materials. Clear accountability for accreditation support and annual training delivery is required.

Qualifications

• At least five years of demonstrated incident investigation experience in cloud environments.
• Must hold IAT III and CSSP Incident Responder certifications.
• Experience with cloud security tools and DoD JRSS.

Responsibilities

• Develop detection use cases focusing on unauthorized cloud activity using Azure AD, Microsoft Sentinel and similar tools.
• Assist in investigation of and response to cyberspace incidents in cloud environments.
• Assist in design and deployment of new defensive cyberspace capabilities in cloud computing.
• Demonstrate effectiveness by identifying and preventing Red Team activity in cloud environments.
• Update tactics, techniques, and procedures (TTPs) and training documentation annually.
• Prepare and present a course on cloud security basics and attack scenarios with 90% satisfaction.
• Support CSSP accreditation per DoD 8530.01-M with documentation and technical writing.

Skills

Incident investigation

Cloud security

Education

IAT III

CSSP Incident Responder

Tools

Tanium

Microsoft Defender for Endpoint

Elastic Kibana

JRSS

Job description

Sentar is seeking a Cloud Response SME in Quantico, VA to serve as the technical authority for cloud defense, incident investigations, and DCO tooling across government cloud environments.

Responsibilities include developing cloud detection use cases, leading investigations, designing new capabilities, and updating TTPs and training materials. Clear accountability for accreditation support and annual training delivery is required.