Senior Cybersecurity Engineer: SIEM/SOAR & Cloud Security

Apex Systems; Virginia (MN); Hybrid; USD 83,000 - 152,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Apex Systems is seeking a seasoned Cybersecurity Engineer to strengthen Security Engineering & Operations, focusing on SIEM/SOAR integrations, secure baselines, and cloud security across identity, endpoints, and network environments.

The role collaborates with IT operations, application teams, and SOC analysts in a hybrid North Chesterfield, VA setting. 10+ years in security engineering and hands-on SIEM skills are essential.

Qualifications

• 10+ years in security engineering, security operations, or systems engineering with cybersecurity responsibilities.
• Hands-on experience with SIEM platforms such as Splunk, LogRhythm, Microsoft Sentinel, or similar.
• Experience with log onboarding, security monitoring, and detection engineering.
• Strong understanding of identity security, including IAM, SSO, MFA, privileged access management, and RBAC.
• Experience securing Windows and Linux environments, network infrastructure, and cloud workloads.
• Experience implementing secure configuration baselines using CIS, DISA STIG, or similar frameworks.
• Proficiency in scripting/automation using PowerShell, Python, or similar languages.
• Understanding of incident response engineering requirements, including visibility, forensic readiness, and data access considerations.
• Experience with security compliance frameworks such as NIST CSF, RMF, CJIS.

Responsibilities

• Design and implement security controls across identity, network, endpoint, and cloud environments.
• Lead SIEM/SOAR integrations, including log onboarding, parsing, normalization, and automation readiness.
• Implement secure configuration and baseline management for critical infrastructure, servers, workstations, and cloud assets.
• Support enterprise security architecture development, including secure-by-design reviews with application and infrastructure teams.
• Develop and tune detection use cases aligned with the security operations roadmap, prioritized by risk and threat exposure.
• Engineer identity security controls, including IAM/PAM hardening, RBAC, and integration with monitoring solutions.
• Implement cryptographic management practices, key lifecycle controls, and validation processes for sensitive systems.
• Build logging pipelines to ensure visibility across endpoints, servers, network devices, identity platforms, and cloud services.
• Support vulnerability management engineering, including scanner integration, asset classification, and remediation workflow design.
• Partner with security operations personnel to develop and tune detection rules, correlation logic, and enrichment processes.
• Participate in incident investigations and root-cause analysis with a focus on engineering solutions to prevent recurrences.
• Implement threat intelligence ingestion pipelines and integrate intelligence feeds into detection and response processes.
• Identify high-impact opportunities for security automation, including alert enrichment, ticket creation, and response workflow orchestration.

Skills

Security engineering

Security operations

Automation scripting

Incident response

Documentation

Education

Bachelor's degree in CS or cybersecurity

CISSP or equivalent

Tools

Splunk

LogRhythm

Microsoft Sentinel

PowerShell

Python

Job description

Apex Systems is seeking a seasoned Cybersecurity Engineer to strengthen Security Engineering & Operations, focusing on SIEM/SOAR integrations, secure baselines, and cloud security across identity, endpoints, and network environments.

The role collaborates with IT operations, application teams, and SOC analysts in a hybrid North Chesterfield, VA setting. 10+ years in security engineering and hands-on SIEM skills are essential.