Remote Tines Engineer: Cyber Defense & Automation

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an experienced Tines Engineer to develop mission-ready cybersecurity capabilities and lead teams across engineering, development, and implementation. The role emphasizes defense, threat detection, and secure operations for enterprise networks in diverse environments.

You will apply knowledge of SIEM, SOAR, EDR/NDR, and zero trust while guiding teammates and coordinating with stakeholders to protect critical systems and data.

Qualifications

• 3+ years of experience in defensive cyber operations or security engineering.
• 3+ years of experience with SIEM platforms (Splunk, Elastic, QRadar, Sentinel, Chronicle).
• 2+ years of experience with SOAR platforms (Swimlane, XSOAR, Phantom).
• Experience architecting detection engineering pipelines, threat hunting workflows, or automated response capabilities.
• Experience with EDR, NDR, or full-packet capture solutions (CrowdStrike, Corelight, Trellix).
• Experience deploying platforms across cloud, on-premises, and disconnected environments using Kubernetes or OpenShift.
• Knowledge of zero trust principles, DoD/IC cybersecurity frameworks, and federal compliance standards.
• HS diploma or GED.

Responsibilities

• Lead a task, project, or team and ensure project completion.
• Provide guidance and direction to technicians, specialists, and managers.
• Apply expertise in engineering design, development, and implementation of enterprise network cyber defense capabilities.

Skills

Defensive cyber operations

Cybersecurity engineering

Security platform architecture

Threat hunting

Zero trust concepts

Federal compliance knowledge

Education

HS diploma or GED

Tools

Splunk Enterprise Security

Elastic

QRadar

Sentinel

Chronicle

Swimlane

XSOAR

Phantom

CrowdStrike

Corelight

Trellix

Kubernetes

OpenShift

Job description

Booz Allen Hamilton is seeking an experienced Tines Engineer to develop mission-ready cybersecurity capabilities and lead teams across engineering, development, and implementation. The role emphasizes defense, threat detection, and secure operations for enterprise networks in diverse environments.

You will apply knowledge of SIEM, SOAR, EDR/NDR, and zero trust while guiding teammates and coordinating with stakeholders to protect critical systems and data.