Hybrid Security Operations Engineer

CSBS; Washington (District of Columbia); On-site; USD 85,000 - 120,000; Full time

Job summary

CSBS is seeking an Associate Security Operations Engineer to monitor and triage security alerts, assist in incident response, and support threat hunting across enterprise systems.

You will work under senior security staff to analyze logs, tune detections, and maintain playbooks, helping protect confidentiality, integrity, and availability of CSBS assets. AWS experience and scripting are a plus.

Qualifications

• Bachelor’s degree or equivalent in a technical field with a security focus.
• Security certifications (e.g., CISSP, SANS) are highly desirable.
• 1–2 years in cybersecurity, IT operations, or related fields.
• Experience with security monitoring, log analysis, or incident response preferred.
• Cloud environments such as AWS are a plus, with scripting ability a bonus.

Responsibilities

• Monitor and triage security alerts from SIEM/EDR and cloud tools.
• Assist with incident response including containment, documentation, and post-incident analysis.
• Support threat hunting by analyzing logs and endpoint data for indicators of compromise.
• Maintain and tune detection rules and monitoring configurations to reduce false positives.
• Document incidents and actions in ticketing systems and collaborate across teams.

Skills

SIEM

EDR

Cloud security

Incident response

Log analysis

Threat hunting

Python scripting

TTPs knowledge

AWS familiarity

Education

B.S. in Computer Science

Security Certifications

Tools

CrowdStrike

Okta

AWS

Job description

CSBS is seeking an Associate Security Operations Engineer to monitor and triage security alerts, assist in incident response, and support threat hunting across enterprise systems.

You will work under senior security staff to analyze logs, tune detections, and maintain playbooks, helping protect confidentiality, integrity, and availability of CSBS assets. AWS experience and scripting are a plus.