Detection Engineer - Cyber Defense & DCO

Quantum Sky; Honolulu (HI); On-site; USD 95,000 - 120,000; Full time

Job summary

Quantum Sky seeks an experienced Detection Engineer to join our DCO team supporting DISA PAC at Ford Island, HI. You will engineer, test, deploy and de-conflict custom detection signatures, firewall rules, and automated blocks across global sensors and cloud environments, including NIPRNet/SIPRNet up to TS/SCI.

This role requires US citizenship and active clearance eligibility. Responsibilities include signature lifecycle management, threat intelligence integration, telemetry analysis, and

Qualifications

• Requires Level II/III DoD-style cyber defender expertise with CND/IDS/IPS tooling.
• Certification or DoD 8140.03 alignment prior to start date (e.g., Security+ or CASP+/GCIA etc.).
• Experience writing, testing, deploying custom intrusion signatures (Snort/Suricata) and firewall/ACL rules.

Responsibilities

• Design, test, deploy custom detection signatures and firewall rules.
• Tune perimeter defenses across DISA enterprise boundaries and cloud integrations.
• Analyze telemetry from blocking tools, refine algorithms to reduce false positives/negatives.
• Track countermeasures and document de-confliction actions; maintain changelogs.
• Perform rapid rollback and adhere to network freeze procedures.

Skills

Intrusion detection/prevention

Firewall rule configuration

Threat hunting

Scripting (Python, PowerShell, Bash)

DoD security policies knowledge

On-call incident response

US Citizenship

Education

Bachelor’s degree in Cybersecurity/CS/CE/IS

Associate degree with 4+ years

8+ years of relevant cyber ops experience in lieu of a degree

Tools

Cisco FirePOWER Management Center

IDS/IPS appliances

Wireshark

tcpdump

Cortex XSOAR / Splunk SOAR / Phantom

Microsoft Defender suite

Rally incident tracking system

Job description

Quantum Sky seeks an experienced Detection Engineer to join our DCO team supporting DISA PAC at Ford Island, HI. You will engineer, test, deploy and de-conflict custom detection signatures, firewall rules, and automated blocks across global sensors and cloud environments, including NIPRNet/SIPRNet up to TS/SCI.

This role requires US citizenship and active clearance eligibility. Responsibilities include signature lifecycle management, threat intelligence integration, telemetry analysis, and