Senior Cloud Incident Response Expert

Sentar; Virginia; Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision with

Flexible Spending Plan

Voluntary Life Insurance

Group Term Life

Short-Term Disability

Long-Term Disability

Generous 401(k) match

Generous PTO

Leave programs (holidays, bereavement,

Maternity, jury and military duty)

Job summary

Sentar seeks a Cloud Response SME in Quantico, VA to serve as the technical authority for cloud security operations. You will design, implement, and maintain cloud defense tools and use cases, lead cloud incident investigations, and support DoD security requirements across government cloud environments.

The role requires IAT III and CSSP Incident Responder certifications, at least five years of cloud incident experience, and hands-on use of Tanium, Defender for Endpoint, Elastic/Kibana, and

Qualifications

• IAT III and CSSP Incident Responder certifications required.
• Five years of demonstrated incident investigation experience in cloud environments.
• Experience with Tanium, Defender for Endpoint, Elastic/Kibana, and JRSS.
• Clearance: TS/SCI eligibility.
• Technical Bachelor's degree or equivalent experience.

Responsibilities

• Develop detection use cases to detect unauthorized activity in cloud environments using government tools (Azure AD, Microsoft Sentinel, etc).
• Assist with investigation and response to cyberspace incidents involving cloud computing environments.
• Assist design and deployment of new DCO capabilities in cloud environments.
• Demonstrate effectiveness by identifying/preventing Red Team activity in government cloud environments.
• Annually update TTPs and training documentation stored on SharePoint or approved media.
• Prepare and present a course on Cloud Computing security and DCO procedures with high participant satisfaction.
• Support CSSP accreditation per DoD-8530.01-M standards.

Skills

Cloud incident investigation

DCO infrastructure

Incident response

Security tooling

Education

IAT III certification

CSSP Incident Responder certification

Tools

Tanium

Microsoft Defender for Endpoint

Elastic/Kibana

JRSS

Azure Active Directory

Microsoft Sentinel

Job description

Sentar seeks a Cloud Response SME in Quantico, VA to serve as the technical authority for cloud security operations. You will design, implement, and maintain cloud defense tools and use cases, lead cloud incident investigations, and support DoD security requirements across government cloud environments.

The role requires IAT III and CSSP Incident Responder certifications, at least five years of cloud incident experience, and hands-on use of Tanium, Defender for Endpoint, Elastic/Kibana, and