Bachelor's degree in Cybersecurity, Computer Science, IT, or related field; or a Master's degree with relevant experience.
2+ years of cybersecurity and/or cloud engineering experience, particularly with Azure and Microsoft Sentinel.
Hands-on experience with Microsoft Sentinel, including analytics rules and incident management.
Proficiency in KQL and JSON-based detections; scripting skills in PowerShell, Python, or Bash.
U.S. citizenship and ability to obtain a Public Trust clearance.
Responsibilities
Administer and optimize Microsoft Sentinel as the core SIEM.
Engineer and manage log ingestion and telemetry from Azure and hybrid sources into Sentinel.
Build and maintain Torq automation playbooks for incident response.
Implement automation using Azure Logic Apps and related services.
Design secure Azure cloud architectures aligned with compliance frameworks.
Support incident response and digital forensics through effective logging and querying.
Research and recommend new security tools and techniques for Azure/Sentinel/Torq.
Benefits
Remote work flexibility available anywhere in the U.S.
Opportunity to work in a multi-tenant MSS environment.
Engagement with advanced cybersecurity technologies and tools.
Contribution to strategic security planning and innovation.
Support for professional development and certifications.
Full Job Description
Job Description
SAIC has an opening for a Cybersecurity Specialist in the Solutions and Technology Group. SAIC provides advanced cybersecurity monitoring and engineering support to government customers in a multi-tenant MSS environment. Our 24/7 operations are centered on Azure, Microsoft Sentinel, and Torq for security automation. The Cybersecurity Specialist/Cloud Engineer will design, implement, and optimize cloud-based security monitoring and automation, serving as a primary engineer for Azure and Sentinel and building Torq workflows to streamline SOC response.
This role is aligned to the NICE Framework (Strategic Planning & Management and Digital Forensics support). U.S. citizenship and the ability to obtain a Public Trust clearance are required. For the right candidate, this position may be remote anywhere in the United States.
Key Responsibilities:
Administer and optimize Microsoft Sentinel as the core SIEM (analytics rules, incidents, hunting, workbooks).
Engineer and manage log ingestion and telemetry from Azure and hybrid sources into Sentinel.
Build and maintain Torq automation playbooks for alert enrichment, routing, and incident response.
Implement additional automation using Azure Logic Apps and related Azure services.
Design and support secure Azure cloud architectures aligned with enterprise security policies and compliance frameworks (e.g., NIST 800-53, FedRAMP, CJIS).
Support incident response and digital forensics by enabling effective logging, querying (KQL), and event reconstruction.
Research and recommend new security tools and techniques in Azure/Sentinel/Torq and contribute to strategic security planning.
Produce clear technical and non-technical documentation on configurations, assessments, and remediation activities.
Qualifications
Qualifications:
Bachelor's degree in Cybersecurity, Computer Science, IT, or related field 2+ years of related cybersecurity and/or cloud engineering experience (strong focus on Azure and Microsoft Sentinel); or a Master's degree in a related field. An additional 4+ years of experience may be considered in lieu of a degree.
Hands-on experience with Sentinel (rules, incidents, hunting) and Azure security/logging services.
Proficiency with KQL and JSON-based detections; scripting in PowerShell, Python, or Bash.
U.S. citizen with the ability to obtain and maintain a Public Trust clearance.
Preferred Qualifications:
Microsoft certifications (e.g., SC-200, AZ-500, AZ-104/AZ-305).
Experience with AKS/container security and multi-tenant MSSP or government environments.
Familiarity with LLM/GenAI use cases in cybersecurity (e.g., enrichment, reporting, detection support).
Experience with Torq or similar SOAR platform (building and maintaining workflows).
About SAIC
Science Applications International Corporation (SAIC) is a technology integrator in the technical, engineering, intelligence, and enterprise information technology markets. SAIC has approximately 26,000 employees and operates in more than 70 countries. The company was founded in 1969 and is headquartered in Reston, Virginia. SAIC provides services to the U.S. government, including the Department of Defense, the intelligence community, and civilian agencies. The company also serves commercial customers in the healthcare, energy, and financial services sectors.
