Cloud Security Engineer - AI-Driven SIEM & Automation

Sabree Software Services, Inc.; Herndon (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Sabree Software Services, Inc. seeks a skilled cloud security engineer to join our CSOC-focused team in Herndon, VA. You will design and implement enterprise-scale monitoring across AWS, Azure, and Oracle, and develop automation to speed incident response.

You will write Python scripts, build detection rules in Splunk, mentor junior staff, and stay current with AI trends in cloud security to continuously improve processes and defenses.

Qualifications

• Experience designing cloud security monitoring for large enterprises.
• Scripting with Python or similar for automation and tooling.
• Strong knowledge of SIEM platforms and incident response.

Responsibilities

• Design, architect, and implement cloud security monitoring systems at enterprise scale.
• Develop scripts and automation tools in Python to support CSOC operations.
• Create automated incident response playbooks and orchestrate CSOC processes.
• Collaborate with CSOC team, mentor juniors, and prepare training materials.
• Stay current on cyber threats and AI trends impacting cloud security and incident response.
• Develop, tune, and optimize cloud detection rules using Splunk SPL.

Skills

AWS

Azure

Oracle

SIEM

Scripting

Automation

Python

Cloud security monitoring

Tools

Splunk

Job description

Sabree Software Services, Inc. seeks a skilled cloud security engineer to join our CSOC-focused team in Herndon, VA. You will design and implement enterprise-scale monitoring across AWS, Azure, and Oracle, and develop automation to speed incident response.

You will write Python scripts, build detection rules in Splunk, mentor junior staff, and stay current with AI trends in cloud security to continuously improve processes and defenses.