Cybersecurity Specialist Cloud Engineer

Description

SAIC has an opening for a Cybersecurity Specialist in the Solutions and Technology Group. SAIC provides advanced cybersecurity monitoring and engineering support to government customers in a multi-tenant MSS environment. Our 24/7 operations are centered on Azure, Microsoft Sentinel, and Torq for security automation. The Cybersecurity Specialist/Cloud Engineer will design, implement, and optimize cloud-based security monitoring and automation, serving as a primary engineer for Azure and Sentinel and building Torq workflows to streamline SOC response.

This role is aligned to the NICE Framework (Strategic Planning & Management and Digital Forensics support). U.S. citizenship and the ability to obtain a Public Trust clearance are required. For the right candidate, this position may be remote anywhere in the United States.

Key Responsibilities:

• Administer and optimize Microsoft Sentinel as the core SIEM (analytics rules, incidents, hunting, workbooks).

• Engineer and manage log ingestion and telemetry from Azure and hybrid sources into Sentinel.

• Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response.

• Implement additional automation using Azure Logic Apps and related Azure services.

• Design and support secure Azure cloud architectures aligned with enterprise security policies and compliance frameworks (e.g., NIST 800-53, FedRAMP, CJIS).

• Support incident response and digital forensics by enabling effective logging, querying (KQL), and event reconstruction.

• Research and recommend new security tools and techniques in Azure/Sentinel/Torq and contribute to strategic security planning.

• Produce clear technical and non-technical documentation on configurations, assessments, and remediation activities.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field 2+ years of related cybersecurity and/or cloud engineering experience (strong focus on Azure and Microsoft Sentinel); or a Master’s degree in a related field. An additional 4+ years of experience may be considered in lieu of a degree.

• Hands-on experience with Sentinel (rules, incidents, hunting) and Azure security/logging services.

• Proficiency with KQL and JSON-based detections; scripting in PowerShell, Python, or Bash.

• U.S. citizen with the ability to obtain and maintain a Public Trust clearance.

Preferred Qualifications:

• Microsoft certifications (e.g., SC-200, AZ-500, AZ-104/AZ-305).

• Experience with AKS/container security and multi-tenant MSSP or government environments.

• Familiarity with LLM/GenAI use cases in cybersecurity (e.g., enrichment, reporting, detection support).

• Experience with Torq or similar SOAR platform (building and maintaining workflows).

Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

REQNUMBER: 2618119

SAIC is a premier technology integrator, solving our nation's most complex modernization and systems engineering challenges across the defense, space, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration; enterprise IT, including cloud services; cyber; software; advanced analytics and simulation; and training. We are a team of 23,000 strong driven by mission, united purpose, and inspired by opportunity. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $6.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see Working at SAIC. EOE AA M/F/Vet/Disability