Senior Security Operations Engineer - AI-Driven Cloud Defense

Sword; United States; Remote; USD 133,000 - 209,000; Full time

Job summary

Sword is seeking a Senior Security Engineer (Security Operations) to safeguard our cloud infrastructure and applications, design detection controls, and lead incident response across teams. You will work with SIEM, SOAR, and AI-enabled security workflows, applying threat intelligence and forensics expertise to optimize security operations.

You will implement AI-assisted runbooks, drive rapid containment, and continuously improve incident response metrics while collaborating with engineering and

Qualifications

• Public Trust Clearance required and ability to obtain/maintain.
• Bachelor’s degree in CS, Cybersecurity, or equivalent.
• Solid experience in cloud environments (AWS, GCP, Azure) and cloud-native threats.
• Python and Bash scripting for automation.
• Strong incident containment and cross-team coordination.
• Familiarity with NIST 800-61, CIS Controls, MITRE ATT&CK, ISO 27001.
• Excellent analytical, problem-solving, and communication skills.
• Ability to translate intelligence into actionable security controls and runbooks.
• Experience in threat modeling and risk-based alert tuning.
• Ability to integrate security tooling with AI platforms and APIs.

Responsibilities

• Design and improve detection and alerting controls for high fidelity and fast response.
• Maintain YARA-L detection rules and SOAR playbooks to automate triage and initial response.
• Drive data-driven triage prioritization aligned with business impact.
• Lead end-to-end incident investigations with telemetry correlation and remediation.
• Engage in threat intel and threat hunting to identify new TTPs.
• Own incident handling from detection to containment and recovery.
• Define and track incident response metrics for continuous improvement.
• Hands-on experience with SOC tools: SIEM, SOAR, EDR/XDR, and log management.

Skills

Public Trust Clearance

Python

Cloud security

Incident response

Threat hunting

SIEM

SOAR

EDR/XDR

Threat modeling

Communication

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Splunk

Sentinel

Google SecOps/Chronicle

SOAR platforms

EDR/XDR tools

Threat intel tools

Job description

Sword is seeking a Senior Security Engineer (Security Operations) to safeguard our cloud infrastructure and applications, design detection controls, and lead incident response across teams. You will work with SIEM, SOAR, and AI-enabled security workflows, applying threat intelligence and forensics expertise to optimize security operations.

You will implement AI-assisted runbooks, drive rapid containment, and continuously improve incident response metrics while collaborating with engineering and