Cloud Security Engineer

MANTECH; Herndon (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

MANTECH seeks a highly technical Cloud Security Engineer to join our team in Herndon, VA. The ideal candidate brings a strong background in AWS, scripting, automation, and SIEM expertise to strengthen cloud incident response posture.

Responsibilities include designing cloud security monitoring systems, developing Python scripts, and implementing automated incident response playbooks. Collaboration with CSOC, mentoring staff, and staying current on AI trends are key parts of the role.

Qualifications

• 7+ years in cloud security or cyber operations.
• 7+ years in OS, network, security principles or system architecture.
• 5+ years in AWS.
• 3+ years coding and scripting in Python.
• Bachelore2ace2a4s degree in CS/IT or related field.
• Experience with automation and SOAR platforms.
• Experience in incident response, threat hunting, or detection engineering.
• Experience with Azure/OCI.
• Relevant certifications (e.g., CISSP, GIAC, CEH).

Responsibilities

• Design, architecture, and implementation of cloud security monitoring systems at enterprise scale.
• Develop and maintain scripts and automation tools using Python.
• Design and implement automated incident response playbooks.
• Collaborate with CSOC team and mentor junior staff; plan cyber exercises; prepare training materials.
• Stay current on cybersecurity trends and technologies; identify opportunities for process improvement and implement best practices.
• Develop, tune, and optimize detection rules for AWS and other cloud platforms using Splunk.

Skills

Cloud security

Operating systems

Network infrastructure

Security principles

System architecture

AWS

Python scripting

Education

Bachelore22ace2a4s degree in Computer Science, Information Technology, or a related technical field

Tools

Splunk

SOAR platforms

Azure

OCI

Job description

MANTECH seeks a highly technical Cloud Security Engineer to join our team in Herndon, VA . Join a dedicated team of cybersecurity experts focused on enhancing the customer’s cloud incident response posture. The ideal candidate brings a strong background in Amazon Web Services (AWS), cyber development, scripting, and automation, coupled with deep expertise in Security Information and Event Management (SIEM) tools.

Responsibilities include, but are not limited to:

• Systems Design & Architecture: Consult on the design, architecture, and implementation of cloud security monitoring systems at enterprise scale.

• Development and Scripting: Develop and maintain scripts and automation tools using Python or similar programming languages.

• Automation and Orchestration: Design and implement automated incident response playbooks to streamline CSOC processes.

• Collaboration and Mentorship: Work closely with CSOC team members to share insights and coordinate response efforts. Provide technical expertise and mentorship to junior staff; plan and implement cyber exercises and drills to sharpen team skills; and prepare reference and training materials for cloud and incident response.

• Continuous Improvement: Stay current on cybersecurity trends, threats, and technologies. Identify opportunities for process improvement and implement best practices. Maintain up-to-date knowledge of relevant AI concepts pertaining to cloud and incident response security.

• Splunk Detection Development: Develop, tune, and optimize detection rules for AWS and other cloud-based platforms using Splunk Query Language.

Minimum Qualifications:

• 7+ years of experience with cloud security or cyber operations

• 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture

• 5+ years of experience with AWS

• 3+ years of experience coding and scripting in Python

Preferred Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related technical field

• Experience with automation and SOAR platforms

• Experience in one of the following: incident response, threat hunt, or detection engineering

• Experience with Azure/OCI

• Relevant certifications (e.g., CISSP, GIAC, CEH)

Clearance Requirements:

Active/current TS/SCI with Polygraph is required for this position

Physical Requirements:

Must be able to remain in a stationary position 50% of the time

MANTECH International Corporation considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation.