SK Cloud Security Engineer

Probity; Herndon (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

Probity is seeking a Senior Cloud Security professional to design, architect, and implement cloud security monitoring systems across enterprise-scale environments. The role focuses on automation, scripting in Python, and mentoring CSOC staff.

The candidate will develop and tune Splunk detections for cloud platforms, stay ahead of cybersecurity trends, and contribute to incident response playbooks and AI-driven security practices.

Qualifications

• 7+ years of experience with cloud security, cloud engineering or cyber operations.
• 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture.
• 5+ years of experience with AWS.
• 3+ years of experience coding and scripting in Python.

Responsibilities

• Design, architecture, and implementation of cloud security monitoring systems at enterprise scale.
• Develop and maintain Python automation scripts and tooling.
• Create automated incident response playbooks to streamline CSOC processes.
• Mentor junior staff and coordinate cyber exercises and training materials.
• Stay current on cybersecurity threats and AI concepts related to cloud security.
• Develop, tune, and optimize Splunk detection rules for cloud platforms.

Skills

Cloud security

AWS

Python scripting

SIEM

Automation

Cloud monitoring

Cyber operations

Tools

Splunk

Job description

PLEASE NOTE: This position requires an ACTIVE Top Secret/SCI Clearance with Polygraph. To be considered for this position, you MUST have an ACTIVE Clearance Level of Top Secret/SCI with Polygraph

Position Code: 26-SC1002-1

Position Description:

The ideal candidate brings a strong background in Amazon Web Services (AWS), Azure or Oracle, cyber development, scripting, and automation, coupled with deep expertise in Security Information and Event Management (SIEM) tools.

Responsibilities include, but are not limited to:

• Systems Design & Architecture: Consult on the design, architecture, and implementation of cloud security monitoring systems at enterprise scale.
• Development and Scripting: Develop and maintain scripts and automation tools using Python or similar programming languages.
• Automation and Orchestration: Design and implement automated incident response playbooks to streamline CSOC processes.
• Collaboration and Mentorship: Work closely with CSOC team members to share insights and coordinate response efforts. Provide technical expertise and mentorship to junior staff; plan and implement cyber exercises and drills to sharpen team skills; and prepare reference and training materials for cloud and incident response.
• Continuous Improvement: Stay current on cybersecurity trends, threats, and technologies. Identify opportunities for process improvement and implement best practices. Maintain up-to-date knowledge of relevant AI concepts pertaining to cloud and incident response security.
• Splunk Detection Development: Develop, tune, and optimize detection rules for AWS and other cloud-based platforms using Splunk Query Language.

Requirements:

• 7+ years of experience with cloud security, cloud engineering or cyber operations
• 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture
• 5+ years of experience with AWS
• 3+ years of experience coding and scripting in Python