Remote Cyber Security Engineer - SIEM & SOAR Automation

System One; Merrifield (VA); On-site; USD 83,000 - 124,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Dental/vision coverage

Job summary

System One is seeking a Cyber Security Engineer for a remote-offsite contract role. You will build automation for security operations, integrate Defender and Panorama APIs with cloud-native security tools, and develop data pipelines for SIEMs like Microsoft Sentinel and Splunk.

You will collaborate with cloud and security engineers to implement secure configurations, monitor compliance, and automate incident response workflows in hybrid environments. Prior experience with IaC tools is preferred.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Proficiency in scripting/programming languages such as Python, PowerShell, Bash, or Go.
• Experience with Microsoft Defender APIs, Palo Alto Networks SCM/Panorama APIs, and cloud security APIs (Azure, AWS, or GCP).
• Solid understanding of cloud security principles, IAM, network segmentation, and compliance frameworks.

Responsibilities

• Develop and maintain automation scripts and applications to support security operations across Defender, Panorama, and cloud platforms.
• Integrate APIs from Defender XDR, Panorama/SCM, and cloud security tools into internal systems and dashboards.
• Build and maintain data pipelines for ingesting and normalizing logs into SIEM platforms like Microsoft Sentinel and Splunk.
• Collaborate with cloud and security engineers to implement secure configurations and monitor compliance in hybrid environments.
• Automate remediation workflows and support SOAR integrations for incident response.
• Monitor platform health, performance, and configuration drift across cloud and on-prem environments.
• Document code, integration processes, and platform configurations for audit readiness.

Skills

Python

PowerShell

Bash

Go

Education

Bachelor's degree

Tools

Terraform

GitHub

Palo Alto APIs

Microsoft Defender APIs

Job description

System One is seeking a Cyber Security Engineer for a remote-offsite contract role. You will build automation for security operations, integrate Defender and Panorama APIs with cloud-native security tools, and develop data pipelines for SIEMs like Microsoft Sentinel and Splunk.

You will collaborate with cloud and security engineers to implement secure configurations, monitor compliance, and automate incident response workflows in hybrid environments. Prior experience with IaC tools is preferred.