AWS Engineer

MANTECH•McLean, VA

4h•$141,500 - $236,000•Onsite

About The Position

MANTECH seeks a highly technical AWS Engineer to join its team in Herndon, Virginia. The position supports a team of cybersecurity experts focused on improving the customer’s cloud incident response posture and calls for expertise in AWS, cyber development, scripting, automation, and SIEM tools. The AWS Engineer consults on the design, architecture, and implementation of enterprise-scale cloud security monitoring systems; develops and maintains scripts and automation tools using Python or similar languages; and implements automated incident response playbooks to streamline CSOC processes. The role collaborates with CSOC team members, mentors junior staff, plans and implements cyber exercises and drills, and prepares cloud and incident-response reference and training materials. The engineer also develops, tunes, and optimizes Splunk Query Language detection rules for AWS and other cloud platforms. The position requires keeping current with cybersecurity trends, threats, technologies, and relevant AI concepts, and identifying and implementing process improvements and best practices. An active/current TS/SCI with Polygraph clearance is required. The role is onsite, and the employee must be able to remain stationary 50% of the time.

Requirements

7+ years of experience with cloud security, cloud engineering, or cyber operations.
7+ years of experience with operating systems, network infrastructure, security principles, or system architecture.
5+ years of experience with AWS.
3+ years of experience coding and scripting in Python.
Active/current TS/SCI with Polygraph clearance.
Must be able to remain in a stationary position 50% of the time.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, or a related technical field.
Experience with automation and SOAR platforms.
Experience in incident response, threat hunting, or detection engineering.
Experience with Azure or OCI.
Relevant certifications such as CISSP, GIAC, or CEH.

Responsibilities

Consult on the design, architecture, and implementation of enterprise-scale cloud security monitoring systems.
Develop and maintain scripts and automation tools using Python or similar programming languages.
Design and implement automated incident response playbooks to streamline CSOC processes.
Collaborate with CSOC team members to share insights and coordinate response efforts.
Provide technical expertise and mentorship to junior staff.
Plan and implement cyber exercises and drills to sharpen team skills.
Prepare reference and training materials for cloud and incident response.
Stay current on cybersecurity trends, threats, and technologies, including relevant AI concepts for cloud and incident response security.
Identify opportunities for process improvement and implement best practices.
Develop, tune, and optimize detection rules for AWS and other cloud-based platforms using Splunk Query Language.