Cybersecurity Specialist Cloud Engineer

SAIC • Flexwork, VA

9d • Remote

About The Position

SAIC is hiring a Cybersecurity Specialist/Cloud Engineer in its Solutions and Technology Group to provide advanced cybersecurity monitoring and engineering support to government customers in a multi-tenant managed security services environment. The role focuses on designing, implementing, and optimizing cloud-based security monitoring and automation, serving as a primary engineer for Azure and Microsoft Sentinel, and building Torq workflows to streamline Security Operations Center response. Operations are 24/7 and centered on Azure, Microsoft Sentinel, and Torq.

The position aligns with the NICE Framework areas of Strategic Planning & Management and Digital Forensics support. The role may be remote anywhere in the United States for the right candidate. U.S. citizenship and the ability to obtain and maintain a Public Trust clearance are required.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field, plus 2 or more years of related cybersecurity and/or cloud engineering experience with a strong focus on Azure and Microsoft Sentinel; alternatively, a Master’s degree in a related field. An additional 4 or more years of experience may be considered in lieu of a degree.
• Hands-on experience with Microsoft Sentinel, including rules, incidents, and hunting, and Azure security and logging services.
• Proficiency with KQL and JSON-based detections.
• Scripting experience in PowerShell, Python, or Bash.
• U.S. citizenship and ability to obtain and maintain a Public Trust clearance.

Nice To Haves

• Microsoft certifications such as SC-200, AZ-500, AZ-104, or AZ-305.
• Experience with AKS/container security and multi-tenant MSSP or government environments.
• Familiarity with LLM/GenAI cybersecurity use cases such as enrichment, reporting, and detection support.
• Experience with Torq or a similar SOAR platform, including building and maintaining workflows.

Responsibilities

• Administer and optimize Microsoft Sentinel, including analytics rules, incidents, hunting, and workbooks.
• Engineer and manage ingestion of logs and telemetry from Azure and hybrid sources into Sentinel.
• Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response.
• Implement additional automation using Azure Logic Apps and related Azure services.
• Design and support secure Azure cloud architectures aligned with enterprise security policies and compliance frameworks such as NIST 800-53, FedRAMP, and CJIS.
• Support incident response and digital forensics through effective logging, KQL querying, and event reconstruction.
• Research and recommend security tools and techniques related to Azure, Sentinel, and Torq, and contribute to strategic security planning.
• Produce technical and non-technical documentation on configurations, assessments, and remediation activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level