Cyber Security Engineer (Pensacola)

Stratas Corporation, Inc.; Pensacola (FL); On-site; USD 90,000 - 95,000; Full time

Job summary

StratasCorp in Pensacola, Florida, seeks a Cybersecurity Engineer to join the Security Operations Center and help maintain and improve the enterprise network's security posture. You will support threat detection, incident response, security engineering, and continuous monitoring, collaborating with SOC and NOC staff while mentoring junior analysts onsite.

Applicants should have a Bachelor's degree in a related field, at least five years of experience, and DoD-aligned certifications; this is an

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Informatics, Information Systems, or related field.
• At least five years of full-time professional cybersecurity engineering/ops experience.
• Current Security+ or DoD 8570/8140-aligned IAT Level II qualification.
• Experience with security monitoring, incident response, and threat detection.
• Ability to work on-site in Pensacola, Florida.

Responsibilities

• Support daily SOC operations, including threat detection and incident response.
• Investigate threats, analyze indicators, and determine root causes.
• Tune SIEM/IDS/IPS rules and dashboards to improve detection and reduce false positives.
• Collaborate with NOC and program leadership to improve security posture.
• Mentor junior analysts and contribute to SOC process improvements.

Skills

Analytical skills

Troubleshooting

Technical documentation

Problem solving

Education

Bachelor's degree in Cybersecurity, Computer Science, Informatics, Information Systems, or related field

Tools

SIEM

IDS/IPS

EDR

Job description

Cyber Security Engineer (Pensacola) - (STRTS8011_COMPANY_1.1)

At StratasCorp, our mission strives to put employees first while still being recognized as a leader in the Department of Defense Information Technology sector. We believe in a continuing pursuit of customer satisfaction and operational excellence while exceling in service innovation. We are looking for employees who value corporate culture, leadership, diversity, and commitment to quality, because we are #TeamStratas.

Category

Information Technology

Job Description

The Cybersecurity Engineer will support the Security Operations Center (SOC) in maintaining, monitoring, and improving the security posture of the customer's enterprise network environment. This position is responsible for supporting cybersecurity threat detection, incident response, security engineering, and continuous monitoring operations to prevent, identify, analyze, and respond to cybersecurity threats and incidents.

The Cybersecurity Engineer will provide technical expertise in the evaluation, integration, implementation, and optimization of SOC technologies, including Security Information and Event Management (SIEM) and Intrusion Detection and Prevention Systems (IDS/IPS). The successful candidate will collaborate with cybersecurity and Network Operations Center (NOC) personnel, contribute to operational and cybersecurity strategies, and mentor junior analysts to strengthen incident investigation capabilities and overall SOC performance.

This position requires a strong technical foundation in enterprise cybersecurity operations, analytical problem-solving skills, and the ability to work collaboratively in a mission-focused environment.

Key Responsibilities

• Support daily SOC operations, including continuous security monitoring, threat detection, incident analysis, and incident response activities.
• Identify, investigate, and analyze potential cybersecurity threats, vulnerabilities, and suspicious network activity.
• Support security incident investigations to determine root cause, assess potential impact, and recommend corrective and preventive actions.
• Coordinate with the Cyber Incident and Event Management team during security incidents, escalations, and high-priority operational events.
• Support continuous improvement of incident response procedures, security monitoring capabilities, and operational workflows.

Security Operations and Incident Response

• Support daily SOC operations, including continuous security monitoring, threat detection, incident analysis, and incident response activities.
• Identify, investigate, and analyze potential cybersecurity threats, vulnerabilities, and suspicious network activity.
• Support security incident investigations to determine root cause, assess potential impact, and recommend corrective and preventive actions.
• Coordinate with the Cyber Incident and Event Management team during security incidents, escalations, and high-priority operational events.
• Support continuous improvement of incident response procedures, security monitoring capabilities, and operational workflows.

Security Engineering and Technology Integration

• Provide cybersecurity engineering expertise to support market research, technology assessments, product evaluations, prototyping, integration, development, deployment, operation, and maintenance of SOC technologies.
• Evaluate emerging cybersecurity tools, technologies, and methodologies to identify opportunities to improve threat detection, incident response, and operational efficiency.
• Develop, implement, and maintain custom SIEM rules, correlation logic, alerts, dashboards, and other detection content.
• Tune and optimize SIEM and IDS/IPS platforms to improve detection accuracy, reduce false positives, and enhance security monitoring effectiveness.
• Support the implementation and continuous improvement of security tools, processes, and technical capabilities in alignment with customer requirements.

Threat Detection and Security Analysis

• Analyze security events, alerts, and log data to identify potential indicators of compromise and malicious activity.
• Support the use and optimization of enterprise security monitoring technologies, including SIEM, Endpoint Detection and Response (EDR), and related security platforms.
• Maintain current knowledge of cybersecurity threats, vulnerabilities, industry best practices, and incident response methodologies.
• Recommend improvements to detection capabilities, security configurations, investigative processes, and operational procedures.

Technical Leadership and Mentorship

• Train, guide, and mentor junior security analysts in effective incident investigation, evidence analysis, root-cause determination, and escalation procedures.
• Promote consistent application of SOC procedures, investigative standards, and incident documentation practices.
• Provide technical guidance and subject matter expertise to support the development of SOC personnel and operational capabilities.

Operational Coordination and Strategic Support

• Coordinate with collocated, on-site NOC personnel to support effective communication, incident coordination, and resolution of network security issues.
• Contribute to the development and refinement of cybersecurity strategies, operational plans, and process improvement initiatives.
• Participate in special projects, technical assessments, and other assignments supporting customer and program objectives.
• Prepare, analyze, and provide operational, technical, and cybersecurity data and reports requested by the Program Manager and corporate office.
• Support additional cybersecurity engineering and SOC operational requirements as assigned.

Required Qualifications

• Bachelor's degree from an accredited institution in Cybersecurity, Computer Science, Informatics, Information Systems, or a related technical field.
• At least five (5) years of full-time professional experience directly related to cybersecurity engineering, security operations, threat detection, incident response, or comparable job functions.
• Current Security+ certification or an equivalent or higher DoD 8570/8140-aligned qualification meeting the applicable IAT Level II requirement.
• Demonstrated knowledge of cybersecurity operations, security monitoring, threat detection, incident investigation, and incident response processes.
• Ability to analyze security events, investigate potential threats, identify root causes, and recommend appropriate mitigation measures.
• Strong analytical, troubleshooting, technical documentation, and problem-solving skills.
• Ability to communicate effectively with cybersecurity personnel, network operations teams, program leadership, and corporate stakeholders.
• Ability to work collaboratively in a mission-focused operational environment.
• Ability and willingness to work on-site at the customer's facility in Pensacola, Florida. This is not a remote or work-from-home position.

Preferred Qualifications

• Experience working with enterprise SIEM, EDR, IDS/IPS, or comparable cybersecurity monitoring and incident response platforms.
• Experience authoring, implementing, testing, and tuning custom SIEM detection rules, correlation logic, alerts, and dashboards.
• Experience reducing false positives and improving detection efficacy through security tool optimization and alert tuning.
• Experience conducting cybersecurity incident investigations, threat analysis, root-cause analysis, and incident remediation.
• Experience evaluating, integrating, deploying, and maintaining cybersecurity technologies within an enterprise environment.
• Experience training or mentoring junior cybersecurity analysts.
• Experience coordinating cybersecurity operations with NOC personnel or other technical operations teams.
• Experience supporting cybersecurity strategy, operational planning, and continuous process improvement.

Required Certification

Candidates must possess CompTIA Security+ or an equivalent or higher certification that satisfies the applicable DoD IAT Level II requirement. Acceptable certifications may include, subject to current DoD qualification requirements:

• CompTIA Security+
• CompTIA Cybersecurity Analyst (CyS90A+)
• Systems Security Certified Practitioner (SSCP)
• GIAC Security Essentials (GSEC)
• Cisco Certified Network Associate Security (CCNA Security), where applicable under current qualification rules

Certifications must meet the customer's applicable workforce qualification and contract requirements.

This position is based on-site at the customer's Security Operations Center in Pensacola, Florida. The Cybersecurity Engineer will work closely with SOC personnel, the Cyber Incident and Event Management team, collocated NOC personnel, and program leadership to support continuous monitoring, incident response, and ongoing improvement of the customer's cybersecurity posture.

The anticipated salary range for this role is $90,000 to $95,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.

We use E-Verify to confirm the identity and employment eligibility of all new hires.

Security Clearance

Secret

Certification Required

Job Type

Full-time

StratasCorp provides a complete compensation package with competitive wages and benefits that include medical, dental, and vision insurance, FSA & HSA accounts, disability and other income protection benefits, life insurance, paid personal time-off benefits, paid holidays, and a 401K Saving Plan with a company matching contribution.

StratasCorp is committed to equal opportunity in employment, actively seeking to build a diverse and talented workforce, including individuals with disabilities and protected veterans.