Senior Cloud Security Engineer – SIEM (Remote)

CMA; City of Albany (NY); On-site; USD 90,000 - 140,000; Full time

Job summary

CMA is seeking a security-focused professional to manage cloud security, IDS/IPS rules, and incident response across enterprise environments. You will configure SIEM alerting, analyze malware and events, and coordinate with N/SOC and IT teams to prevent threats.

You will monitor LDAP/AD accounts, maintain ITSM tickets, and produce management reports on security posture, trends, and recommendations. Remote role with global visibility.

Qualifications

• Cloud SIEM familiarity (GCP SCC, Splunk)
• BCP/IR
• Endpoint detection & response (EDR) tools (Falcon, Symantec)
• Cloud Infrastructure security tools (GCP SCC, GCP Cloud Armor, AWS tools, IDS/IPS, FW, DNS)
• M365 familiarity (Entra, Azure, Email)
• Security control frameworks (NIST, CIS, OWASP, AI RMF)

Responsibilities

• Maintain and monitor IDS/IPS rules and cloud security administration.
• Review and update security incident tickets within ITSM; open and manage tickets.
• Monitor cloud-based LDAP/Active Directory accounts and user access.
• Assist investigations into cloud security intrusions, events, or suspicious activity.
• Correlate SIEM events for early warning, trends and prevention.
• Provide reports and updates to CMA management as needed.

Skills

Cloud SIEM familiarity

BCP/IR

EDR tools

Cloud infrastructure security

M365 familiarity

Security frameworks

Tools

Splunk

Falcon

Symantec

Job description

CMA is seeking a security-focused professional to manage cloud security, IDS/IPS rules, and incident response across enterprise environments. You will configure SIEM alerting, analyze malware and events, and coordinate with N/SOC and IT teams to prevent threats.

You will monitor LDAP/AD accounts, maintain ITSM tickets, and produce management reports on security posture, trends, and recommendations. Remote role with global visibility.