Sr. Security Engineer

World Wide Technology Healthcare Solutions • San Antonio, TX

1d • $115,000 - $129,000 • Onsite

About The Position

WWT is looking for a Sr. Security Engineer supports the deployment, operation, and sustainment of the cybersecurity platforms within a secure Department of Defense (DoW) environment. This role focuses on platform operations, automation, threat intelligence integration, and support of cyber defense analytics.

Requirements

• Top Secret clearance with SCI eligibility required
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field.
• 4+ years of experience supporting cybersecurity platforms, cyber operations environments, or enterprise IT systems.
• Experience conducting threat hunting within enterprise or mission-hosted network environments by analyzing network traffic, authentication activity, endpoint telemetry, and application logs to identify malicious activity, lateral movement, and persistence mechanisms.
• Experience using the Elastic Stack (Elasticsearch, Logstash, Kibana), MDE, Trellix, or Tanium to ingest, correlate, and analyze large-scale security telemetry and develop queries and dashboards to detect anomalous behavior and indicators of compromise.
• Experience performing threat hunting in AWS environments using cloud telemetry such as CloudTrail and VPC Flow Logs, with familiarity leveraging HashiCorp Boundary for secure, identity-aware access to investigative systems and cloud resources.
• Experience with Python and Docker containers.
• Experience supporting security products or security operations workflows.
• Minimum 4 years’ experience in DoW incident response and threat hunting
• Familiarity with Threat Intelligence analysis and the MITRE ATT&CK framework.
• DoD 8570 IAT Level II certification (e.g., Security+ or equivalent).
• AWS API integration experience
• AWS Cloud certification
• GIAC Certified Forensic Analyst (GCFA)

Nice To Haves

• Experience with AI & ML models, MCP, and agentic workflows supporting cybersecurity analytics.
• Familiarity with automated attack analysis or threat detection platforms.

Responsibilities

• Support deployment, configuration, API integration and sustainment of cloud-based cyber platform components.
• Maintain and troubleshoot Linux based applications on various distributions.
• Maintain and troubleshoot services hosted as containers or virtual machines.
• Maintain and troubleshoot network forensics technologies similar to Zeek and Suricata.
• Develop and maintain automation using python scripts to support platform operations and security analytics.
• Support integration of threat intelligence data sources and detection workflows aligned with the MITRE ATT&CK framework.
• Assist with automated attack kill chain analysis and security event correlation.
• Support cybersecurity operations teams with the platform API integration (Cloud), troubleshooting, performance monitoring, and system maintenance.

Benefits

• Health and Wellbeing: Health, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
• Paid Time Off: PTO and Sick Leave (starting at 20 days per year) & Holidays (10 per year), Parental Leave, Military Leave, Bereavement
• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees