SK Cloud Security Engineer

PLEASE NOTE: This position requires an ACTIVE Top Secret/SCI Clearance with Polygraph. To be considered for this position, you MUST have an ACTIVE Clearance Level of Top Secret/SCI with Polygraph Position Code: 26-SC1002-1 Position Description: The ideal candidate brings a strong background in Amazon Web Services (AWS), Azure or Oracle, cyber development, scripting, and automation, coupled with deep expertise in Security Information and Event Management (SIEM) tools.

Responsibilities

Systems Design & Architecture: Consult on the design, architecture, and implementation of cloud security monitoring systems at enterprise scale. Development and Scripting: Develop and maintain scripts and automation tools using Python or similar programming languages. Automation and Orchestration: Design and implement automated incident response playbooks to streamline CSOC processes.

Collaboration and Mentorship: Work closely with CSOC team members to share insights and coordinate response efforts. Provide technical expertise and mentorship to junior staff; plan and implement cyber exercises and drills to sharpen team skills; and prepare reference and training materials for cloud and incident response.

Continuous Improvement: Stay current on cybersecurity trends, threats, and technologies. Identify opportunities for process improvement and implement best practices. Maintain up-to-date knowledge of relevant AI concepts pertaining to cloud and incident response security. Splunk Detection Development: Develop, tune, and optimize detection rules for AWS and other cloud-based platforms using Splunk Query Language.

Requirements

7+ years of experience with cloud security, cloud engineering or cyber operations 7+ years of experience with Operating Systems, Network Infrastructure, Security Principles or System Architecture 5+ years of experience with AWS 3+ years of experience coding and scripting in Python