Cloud Response SME - Cyber Defense & IR Expert

Sentar; Quantico (VA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision

401(k) match

Paid time off

Holiday leave

Job summary

Sentar seeks a Cloud Response SME in Quantico, VA to act as the primary technical authority for cloud defense operations. You will design, implement, and maintain cloud security controls, develop detection use cases, and lead investigations of cloud incidents using Tanium, Defender for Endpoint, Elastic/Kibana, and JRSS tools.

You will also update procedures annually, deliver security trainings, and contribute to CSSP accreditation efforts, with TS/SCI eligibility to support government customers.

Qualifications

• Five years of demonstrated incident investigation in cloud environments.
• Experience handling national and state level intrusions.
• Expertise in cloud computing environments with detection use cases.

Responsibilities

• Develop detection use cases to detect unauthorized activity in cloud environments.
• Assist with investigation of cyberspace incidents in cloud environments.
• Assist design and deployment of new DCO capabilities in cloud environments.
• Identify and prevent Red Team activity in government cloud environments.
• Update TTPs and training docs annually.
• Prepare and present a cloud security course for DCO staff.

Skills

Cloud security

Incident response

Threat detection

DCO tooling

Cybersecurity operations

Cross-domain

Education

Technical Bachelor's degree

Tools

Tanium

Microsoft Defender for Endpoint

Elastic/Kibana

JRSS

Job description

Sentar seeks a Cloud Response SME in Quantico, VA to act as the primary technical authority for cloud defense operations. You will design, implement, and maintain cloud security controls, develop detection use cases, and lead investigations of cloud incidents using Tanium, Defender for Endpoint, Elastic/Kibana, and JRSS tools.

You will also update procedures annually, deliver security trainings, and contribute to CSSP accreditation efforts, with TS/SCI eligibility to support government customers.