TS/SCI Cloud Security Engineer - CSOC, AWS, Splunk, Python

B4Corp; Herndon (VA); On-site; USD 153,000 - 255,000; Full time

Benefits offered by this job

401k plan with employer match

Phantom stock (2-year vesting)

Medical insurance

Dental insurance

Vision insurance

Short-term disability

Long-term disability

Life insurance

Employee referral bonus

PTO 7 weeks/year

Flexible schedule

Job summary

B4Corp, a defense contracting company, seeks a Cloud Security Engineer to design enterprise-scale cloud monitoring, develop automation tools in Python, and create incident response playbooks. The role requires TS/SCI clearance and hands-on experience with AWS or Oracle, SIEM, and Splunk.

The engineer will mentor junior staff, lead cyber exercises, and stay current on AI-related security practices, contributing to continuous improvement across CSOC operations.

Qualifications

• 7+ years of experience with cloud security or cyber operations
• 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture
• 5+ years of experience with AWS or Oracle
• 3+ years of experience coding and scripting in Python

Responsibilities

• Systems Design & Architecture: design and implement cloud security monitoring systems at enterprise scale
• Development and Scripting: develop scripts and automation tools using Python
• Automation and Orchestration: design and implement automated incident response playbooks
• Collaboration and Mentorship: work with CSOC team, mentor junior staff, plan cyber exercises and training
• Continuous Improvement: stay current on cybersecurity trends and AI concepts for cloud security
• Splunk Detection Development: develop and tune detection rules for cloud platforms using Splunk

Skills

Cloud security

AWS

Splunk

Python

Automation

SIEM

Cyber operations

Tools

Splunk

Python

Job description

B4Corp, a defense contracting company, seeks a Cloud Security Engineer to design enterprise-scale cloud monitoring, develop automation tools in Python, and create incident response playbooks. The role requires TS/SCI clearance and hands-on experience with AWS or Oracle, SIEM, and Splunk.

The engineer will mentor junior staff, lead cyber exercises, and stay current on AI-related security practices, contributing to continuous improvement across CSOC operations.