Remote Position
[Remote] Cybersecurity Specialist Cloud Engineer
🌍 Remote · United States
💼 Full-time
Note: The job is a remote job and is open to candidates in USA. SAIC is hiring a Cybersecurity Specialist/Cloud Engineer to provide cloud-based cybersecurity monitoring and engineering support in a multi-tenant managed security services environment. The role focuses on Azure and Microsoft Sentinel security monitoring, Torq automation, secure cloud architecture, and support for incident response and digital forensics.
Responsibilities
- Administer and optimize Microsoft Sentinel as the core SIEM (analytics rules, incidents, hunting, workbooks)
- Engineer and manage log ingestion and telemetry from Azure and hybrid sources into Sentinel
- Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response
- Implement additional automation using Azure Logic Apps and related Azure services
- Design and support secure Azure cloud architectures aligned with enterprise security policies and compliance frameworks (e.g., NIST 800-53, FedRAMP, CJIS)
- Support incident response and digital forensics by enabling effective logging, querying (KQL), and event reconstruction
- Research and recommend new security tools and techniques in Azure/Sentinel/Torq and contribute to strategic security planning
- Produce clear technical and non-technical documentation on configurations, assessments, and remediation activities
Skills
- Bachelor's degree in Cybersecurity, Computer Science, IT, or related field 2+ years of related cybersecurity and/or cloud engineering experience (strong focus on Azure and Microsoft Sentinel); or a Master's degree in a related field
- An additional 4+ years of experience may be considered in lieu of a degree
- Hands-on experience with Sentinel (rules, incidents, hunting) and Azure security/logging services
- Proficiency with KQL and JSON-based detections; scripting in PowerShell, Python, or Bash
- U.S. citizen with the ability to obtain and maintain a Public Trust clearance
- Microsoft certifications (e.g., SC-200, AZ-500, AZ-104/AZ-305)
- Experience with AKS/container security and multi-tenant MSSP or government environments
- Familiarity with LLM/GenAI use cases in cybersecurity (e.g., enrichment, reporting, detection support)
- Experience with Torq or similar SOAR platform (building and maintaining workflows)
Benefits
- For the right candidate, this position may be remote anywhere in the United States.
Company Overview