Cybersecurity Specialist Cloud Engineer

SAIC; Yorktown (VA); Remote; USD 110,000 - 160,000; Full time

Job summary

SAIC is seeking a Cybersecurity Specialist/Cloud Engineer to design, implement, and optimize Azure-based security monitoring using Sentinel and Torq workflows. This role supports a multi-tenant MSS environment for government customers and aligns with NICE Framework disciplines.

U.S. citizenship is required, with the ability to obtain a Public Trust. Remote work may be available nationwide in the United States.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; or 2+ years related experience with a degree.
• Hands-on experience with Microsoft Sentinel (rules/incidents hunting) and Azure security/logging services.
• Proficiency in KQL and JSON-based detections; scripting in PowerShell, Python, or Bash.
• U.S. citizen able to obtain and maintain a Public Trust clearance.

Responsibilities

• Administer and optimize Microsoft Sentinel as the core SIEM with analytics, incidents, and hunts.
• Engineer and manage log ingestion from Azure and hybrid sources into Sentinel.
• Build and maintain Torq automation playbooks for alert enrichment and incident response.
• Implement automation using Azure Logic Apps and related Azure services.
• Design secure Azure cloud architectures aligned with NIST 800-53, FedRAMP, CJIS.
• Support incident response and forensics with logging, KQL queries, and reconstruction.
• Research and recommend new security tools in Azure/Sentinel/Torq and aid strategic planning.
• Produce clear documentation of configurations, assessments, and remediation actions.

Skills

Sentinel

KQL

JSON-based detections

PowerShell

Python

Bash

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or related field

Master's degree in a related field

Tools

Torq

Azure

Azure Logic Apps

Microsoft Sentinel

Job description

SAIC has an opening for a Cybersecurity Specialist in the Solutions and Technology Group. SAIC provides advanced cybersecurity monitoring and engineering support to government customers in a multi-tenant MSS environment. Our 24/7 operations are centered on Azure, Microsoft Sentinel, and Torq for security automation. The Cybersecurity Specialist/Cloud Engineer will design, implement, and optimize cloud-based security monitoring and automation, serving as a primary engineer for Azure and Sentinel and building Torq workflows to streamline SOC response.

This role is aligned to the NICE Framework (Strategic Planning & Management and Digital Forensics support). U.S. citizenship and the ability to obtain a Public Trust clearance are required. For the right candidate, this position may be remote anywhere in the United States.

Key Responsibilities:

• Administer and optimize Microsoft Sentinel as the core SIEM (analytics rules, incidents, hunting, workbooks).
• Engineer and manage log ingestion and telemetry from Azure and hybrid sources into Sentinel.
• Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response.
• Implement additional automation using Azure Logic Apps and related Azure services.
• Design and support secure Azure cloud architectures aligned with enterprise security policies and compliance frameworks (e.g., NIST 800-53, FedRAMP, CJIS).
• Support incident response and digital forensics by enabling effective logging, querying (KQL), and event reconstruction.
• Research and recommend new security tools and techniques in Azure/Sentinel/Torq and contribute to strategic security planning.
• Produce clear technical and non-technical documentation on configurations, assessments, and remediation activities.

Qualifications

Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field 2+ years of related cybersecurity and/or cloud engineering experience (strong focus on Azure and Microsoft Sentinel); or a Master's degree in a related field. An additional 4+ years of experience may be considered in lieu of a degree.
• Hands-on experience with Sentinel (rules, incidents, hunting) and Azure security/logging services.
• Proficiency with KQL and JSON-based detections; scripting in PowerShell, Python, or Bash.
• U.S. citizen with the ability to obtain and maintain a Public Trust clearance.

Preferred Qualifications:

• Microsoft certifications (e.g., SC-200, AZ-500, AZ-104/AZ-305).
• Experience with AKS/container security and multi-tenant MSSP or government environments.
• Familiarity with LLM/GenAI use cases in cybersecurity (e.g., enrichment, reporting, detection support).
• Experience with Torq or similar SOAR platform (building and maintaining workflows).

SAIC is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.