Senior Cloud Security Engineer – AWS & Incident Response

MANTECH; Herndon (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

MANTECH seeks a highly technical Cloud Engineer to join our team in Herndon, VA. Join a dedicated team of cybersecurity experts focused on enhancing the customer’s cloud incident response posture.

The ideal candidate brings a strong background in AWS, cyber development, scripting, and automation, with deep expertise in SIEM tools. Responsibilities include designing cloud security monitoring systems, developing automation scripts in Python, and creating automated incident response playbooks.

Qualifications

• 7+ years of experience with cloud security or cyber operations.
• 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture.
• 5+ years of experience with AWS.
• 3+ years of experience coding and scripting in Python.

Responsibilities

• Consult on the design, architecture, and implementation of cloud security monitoring systems at enterprise scale.
• Develop and maintain scripts and automation tools using Python or similar programming languages.
• Design and implement automated incident response playbooks to streamline CSOC processes.
• Work closely with CSOC team members to share insights and mentor junior staff; plan cyber exercises and drills; prepare training materials.
• Stay current on cybersecurity trends, threats, and technologies; identify opportunities for process improvement and implement best practices.
• Develop, tune, and optimize detection rules for AWS and other cloud-based platforms using Splunk.

Skills

Cloud security

Cyber operations

Automation

Python scripting

Splunk

Education

Bachelor's degree

Tools

Azure

OCI

SOAR platforms

Job description

MANTECH seeks a highly technical Cloud Engineer to join our team in Herndon, VA. Join a dedicated team of cybersecurity experts focused on enhancing the customer’s cloud incident response posture.

The ideal candidate brings a strong background in AWS, cyber development, scripting, and automation, with deep expertise in SIEM tools. Responsibilities include designing cloud security monitoring systems, developing automation scripts in Python, and creating automated incident response playbooks.