Remote Azure Cloud Security Engineer & SOC Automation Lead

SAIC; United States; Teletrabalho; USD 110 000 - 160 000; Tempo integral

Resumo da oferta

SAIC is seeking a Cybersecurity Specialist/Cloud Engineer to design, implement, and optimize cloud-based security monitoring. You will serve as a primary engineer for Azure and Sentinel, building Torq workflows to streamline SOC response.

The role aligns to the NICE Framework and requires US citizenship with the ability to obtain a Public Trust clearance. Remote work is possible anywhere in the United States for the right candidate.

Qualificações

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; 2+ years of related cybersecurity/cloud engineering experience.

Responsabilidades

• Administer and optimize Microsoft Sentinel as the core SIEM (analytics rules, incidents, hunting, workbooks).
• Engine er and manage log ingestion and telemetry from Azure and hybrid sources into Sentinel.
• Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response.
• Implement automation using Azure Logic Apps and related Azure services.
• Design and support secure Azure cloud architectures aligned with policies and compliance (NIST 800-53, FedRAMP, CJIS).
• Support incident response and digital forensics with logging, querying (KQL), and event reconstruction.
• Research and recommend new security tools and techniques in Azure/Sentinel/Torq; contribute to strategic security planning.
• Produce clear technical and non-technical documentation on configurations, assessments and remediation activities.

Conhecimentos

Azure

Microsoft Sentinel

KQL

PowerShell

Python

Bash

Incident response

Security analytics

Formação académica

Bachelor's degree in Cybersecurity / Computer Science / IT

Master's degree in related field

Ferramentas

Torq

Azure Logic Apps

AKS

Sentinel configurations

Descrição da oferta de emprego

SAIC is seeking a Cybersecurity Specialist/Cloud Engineer to design, implement, and optimize cloud-based security monitoring. You will serve as a primary engineer for Azure and Sentinel, building Torq workflows to streamline SOC response.

The role aligns to the NICE Framework and requires US citizenship with the ability to obtain a Public Trust clearance. Remote work is possible anywhere in the United States for the right candidate.