Cyber Security Engineer

Archer; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Paid time off

Medical insurance

Dental insurance

Vision insurance

Tuition reimbursement

401k

Job summary

Telos Corporation is seeking a Security Engineer to deliver backend design, data integration, and automated detection workflows for insider threat tools and a homegrown UEBA/UBA solution. The role bridges security data engineering with threat detection across cloud, sovereign, and corporate environments.

You will build robust backend logic, ingest diverse signals, and tune detection rules while collaborating with CSIRT, Legal, HR, and privacy teams.

Qualifications

• 3+ years in Security Engineering or related roles.
• Strong Python or Go scripting for automation.
• Experience with SIEM platforms (Splunk, Chronicle, MS Sentinel).
• Understanding of security telemetry (EDR) and Cloud/SaaS patterns.
• Experience with insider threat programs and case management is a plus.

Responsibilities

• Design, deploy, and tune behavioral risk models within our UBA platform.
• Aggregate and correlate high-volume data streams to detect anomalous user behavior and construct timelines.
• Reduce false positives and improve detection coverage against threat matrices.
• Build API-based integrations to automate responses and connect detection with incident workflows.

Skills

Python

Go

SQL

SIEM

UEBA

Education

Bachelor's degree in CS/IS

Tools

Splunk

Chronicle

Microsoft Sentinel

Job description

Archer is collaborating with Telos to connect them with exceptional professionals for this role. The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment!

This position will be based at Remote.

We are seeking a Security Engineer to provide dedicated technical engineering and systems integration support for our deployed insider threat tools and homegrown User Behavior Analytics (UBA / UEBA) solution. In this role, you will bridge the gap between security data engineering and threat detection to safeguard core assets—including intellectual property, sensitive datasets, critical infrastructure, and physical facilities—against both deliberate malicious acts and unintentional internal risk exposure. Rather than performing raw application development, you will focus on building robust backend logic, integrating disparate data sources, and engineering automated detection workflows across multiple operational environments—including sovereign delivery, cloud, and corporate infrastructures.

Scope Of Work & Core Responsibilities

Behavioral Analytics & Detection Engineering

• Build & Tune Detections: Design, deploy, and continuously tune behavioral risk models, anomaly detection heuristics, and threat rules within our UBA platform.
• Multivariate Data Analysis & Anomaly Detection: Aggregate and correlate complex, high-volume, disparate data streams (e.g., identity lifecycle, physical badge logs, security clearance details, network telemetry, OSINT, endpoint activity, and SaaS logs) to detect anomalous user behavior and construct chronological user timelines.
• Reduce False Positives: Assess model performance, evaluate detection coverage against known threat matrices, and systematically minimize false-positive alert noise.

Systems Integration & Pipeline Engineering

• Incorporate New Signals: Partner with Corporate Engineering and Infrastructure teams to securely ingest new high-value telemetry and risk signals into the analytics engine.
• Maintain Homegrown Platforms: Assist in the maintenance, optimization, and scaling of backend data pipelines, ensuring reliability and risk-scoring consistency.
• Automate Response Workflows: Build API-based integrations and automated workflows to connect detection engines with investigative case management platforms and incident response ticketing.

Cross-Functional Collaboration & Compliance

• Cross-Functional Incident Support: Work alongside Incident Response (CSIRT), Legal, HR, Privacy, and Corporate Security teams to reconstruct timelines and provide factual findings with clear confidence levels.
• Strict Privacy Adherence: Execute data integration and investigative actions strictly within authorized scope, ensuring adherence to strict internal auditing, privacy regulations, and confidentiality protocols.
• Technical Advisory & Tooling Integration: Serve as a technical advisor and subject matter expert for case management, insider threat software tooling setup, system administration, and engineering efforts.

Job Requirements

Qualifications

• Experience: 3+ years of experience in Security Engineering, Detection Engineering, Security Operations, or Insider Threat technical roles.
• Scripting & Automation: Strong proficiency in Python or Go for workflow automation, alongside solid SQL capabilities for data query and correlation.
• Data & Analytics Platforms: Hands‑on experience working with SIEM platforms (e.g., Splunk, Chronicle, Microsoft Sentinel), writing advanced detection queries, and configuring UBA/UEBA systems.
• Security Telemetry: Good understanding of data exfiltration vectors, system logs, endpoint telemetry (EDR), and Cloud/SaaS access patterns.
• Preferred Qualifications
• Experience modeling "employee lifecycle" risk indicators (e.g., pre-resignation telemetry, access pattern anomalies).
• Familiarity with data engineering concepts (e.g., ETL pipelines, schema design, and log normalization).
• High degree of discretion and experience handling highly sensitive investigation logs.
• Technical proficiency in implementing security engineering controls, such as Data Loss Prevention (DLP), Privileged Access Management (PAM), Zero Trust Architecture, backup tooling, and event monitoring infrastructure.
• Demonstrated experience in collecting, analyzing, investigating, escalating security incidents, responding to insider incidents, and disseminating threat intelligence.

The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Telos maintains a drug‑free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.

Telos Corporation participates in the E‑Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. Telos offers excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future.

Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. Telos Corporation will make reasonable accommodations for known physical or mental limitations of otherwise qualified employees and applicants with disabilities unless the accommodation would impose an undue hardship on the operation of our business. If you are interested in applying for an employment opportunity and feel you need a reasonable accommodation pursuant to the ADA, please contact us at 1-800-283-1911. If you require relay service assistance, please click on the following link to review information on your state's relay service: https://www.fcc.gov/accessibility.

Telos Corporation is an EEO/AA employer.