[Remote] Senior Security/Threat Engineer

Note: The job is a remote job and is open to candidates in USA. DecisionPoint Corporation seeks a Senior Security/Threat Engineer to lead enterprise cybersecurity monitoring, threat detection, vulnerability management, and incident response for federal and DoD-aligned mission systems. The role oversees SIEM analytics, vulnerability scanning, continuous monitoring, threat hunting, and security readiness across mission applications, cloud workloads, and enterprise platforms.

Responsibilities

• Lead enterprise threat monitoring, detection engineering, and cybersecurity analytics functions
• Oversee ACAS/Nessus scanning operations, vulnerability trending, severity analysis, and remediation coordination
• Manage SIEM alerting, log correlation, advanced query development, and threat detection tuning
• Conduct threat hunting activities to identify anomalous behavior, emerging threats, or latent indicators of compromise
• Validate STIG implementation, patch compliance, and secure configuration baselines across systems
• Execute and maintain the Continuous Monitoring Plan including scanning schedules, reporting cycles, and compliance verification
• Develop detection rules, dashboards, and analytic models to strengthen situational awareness and reduce dwell time
• Support incident response activities including triage, containment, forensic review, and corrective action planning
• Provide risk-based recommendations to engineering teams based on identified vulnerabilities, misconfigurations, or threat trends
• Produce threat intelligence summaries, vulnerability reports, and continuous monitoring deliverables for government stakeholders
• Coordinate with cloud engineers, ISSOs, DevSecOps teams, and cybersecurity analysts to maintain a secure operational posture
• Improve automation for monitoring, scanning, log analysis, and cybersecurity reporting
• Mentor junior analysts and strengthen enterprise detection and response capabilities

Skills

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation
• Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Technology, or a related field
• Minimum 10 years of experience in cybersecurity, threat detection, or vulnerability management
• Experience leading enterprise monitoring, threat analysis, SIEM operations, or vulnerability programs
• Experience conducting ACAS/Nessus scans, validating STIG compliance, and verifying patch levels
• Experience performing threat hunting, log analysis, and incident response activities
• Experience developing detection rules, analytic patterns, or SIEM dashboards
• Experience coordinating across cloud, operations, and engineering teams to remediate high-risk findings
• Deep understanding of SIEM platforms, log analytics, threat detection, and correlation techniques
• Strong knowledge of ACAS, Nessus scanning, STIG requirements, and vulnerability remediation workflows
• Understanding of NIST SP 800-53, RMF continuous monitoring requirements, and DoD cybersecurity directives
• Experience with cloud-native security monitoring tools and continuous monitoring environments
• Knowledge of network security, behavioral analytics, and threat-hunting methodologies
• CISSP or CCSP or Security+
• Strong analytical and investigative skills for identifying, triaging, and responding to threats
• Excellent communication skills for presenting threat summaries and vulnerability findings to stakeholders
• Ability to lead monitoring and vulnerability management programs with minimal oversight
• Strong attention to detail and precision in security data analysis and documentation
• Ability to manage multiple priorities and respond rapidly in a mission-critical environment
• Experience with AWS cloud security services and AWS Security certifications
• Familiarity with MITRE ATT&CK, cyber kill chain analysis, or adversary emulation techniques
• Experience with container security, Kubernetes monitoring, or cloud-native workload protections
• Knowledge of SOAR tools or automation workflows for monitoring and response
• AWS Security Specialty
• GIAC certifications (GCIH, GCIA, GDAT, GCDA, or similar)
• CISM

Benefits

• Fully remote work

Company Overview