2 days ago
Remote, United StatesMid Level
Responsibilities
- Administer and optimize Microsoft Sentinel analytics rules, incidents, hunting capabilities, and workbooks.
- Engineer and manage Azure and hybrid-source log ingestion and telemetry into Sentinel.
- Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response.
- Implement automation using Azure Logic Apps and related Azure services.
- Design and support secure Azure cloud architectures aligned with enterprise security and compliance frameworks.
- Support incident response and digital forensics through logging, KQL querying, and event reconstruction.
- Research security tools and techniques and contribute to strategic security planning.
- Produce technical and non-technical documentation covering configurations, assessments, and remediation activities.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, IT, or a related field with 2+ years of related cybersecurity or cloud engineering experience, or a master's degree in a related field.
- An additional 4+ years of experience may substitute for the degree requirement.
- Hands-on experience with Microsoft Sentinel and Azure security and logging services.
- Proficiency with KQL and JSON-based detections.
- Scripting experience with PowerShell, Python, or Bash.
- U.S. citizenship and the ability to obtain and maintain a Public Trust clearance.
- Preferred qualifications include Microsoft SC-200, AZ-500, AZ-104, or AZ-305 certifications; AKS and container security experience; multi-tenant MSSP or government-environment experience; LLM/GenAI cybersecurity use-case familiarity; and Torq or similar SOAR platform experience.
Benefits
- The position may be remote anywhere in the United States.
About SAIC
SAIC (Science Applications International Corporation) is a government technology integrator delivering systems engineering, enterprise IT, secure cloud, cybersecurity, C5ISR, and data analytics for U.S. defense, space, intelligence, and civilian agencies. It builds and sustains mission IT and digital engineering solutions under multi-year federal contracts and task orders. Founded in 1969, SAIC is headquartered in Reston, Virginia, and is a public company traded on the NYSE under the ticker SAIC.