security operations engineer

Datamatics Technologies

<div>
 Job Description: Data Security &amp; Privacy Engineer
 <p>
  <strong>
   Job Title:
  </strong>
  Data Security &amp; Privacy Engineer
  <br/>
  <strong>
   Experience:
  </strong>
  3&ndash;11+ Years
  <br/>
  <strong>
   Location:
  </strong>
  &nbsp;
  <strong>
   Riyadh - Onsite
   <br/>
  </strong>
  <strong>
   Employment Type:
  </strong>
  Full-Time
 </p>
 Job Overview
 <p>
  We are seeking a skilled
  <strong>
   Data Security &amp; Privacy Engineer
  </strong>
  with
  <strong>
   3&ndash;11+ years of experience
  </strong>
  to design, implement, and manage enterprise data security and privacy solutions. The ideal candidate will have strong expertise in identity and access management, data protection technologies, encryption, security monitoring, and privacy controls across cloud environments. This role will be responsible for ensuring the confidentiality, integrity, and availability of enterprise data while supporting regulatory compliance and security best practices.
 </p>
 Key Responsibilities
 <ul>
  <li>
   Design and implement data security and privacy controls across enterprise environments
  </li>
  <li>
   Manage identity and access management (IAM) solutions across cloud platforms
  </li>
  <li>
   Implement data protection strategies including encryption, masking, and data loss prevention
  </li>
  <li>
   Configure and manage security monitoring and threat detection solutions
  </li>
  <li>
   Support security assessments, audits, and compliance initiatives
  </li>
  <li>
   Define and enforce data security policies, standards, and best practices
  </li>
  <li>
   Collaborate with cloud, infrastructure, application, and data teams to secure enterprise data assets
  </li>
  <li>
   Monitor security events, investigate incidents, and support remediation activities
  </li>
  <li>
   Implement secure data handling practices throughout the data lifecycle
  </li>
  <li>
   Support privacy initiatives including sensitive data discovery, classification, and protection
  </li>
  <li>
   Continuously evaluate emerging security threats and recommend improvements
  </li>
 </ul>
 Required Technical SkillsIdentity &amp; Access Management (IAM)
 <ul>
  <li>
   Hands-on experience with
   <strong>
    GCP IAM or Azure IAM or AWS IAM
   </strong>
  </li>
  <li>
   Strong understanding of identity governance, authentication, authorization, roles, permissions, and access controls
  </li>
  <li>
   Experience implementing least privilege access models and access management best practices
  </li>
 </ul>
 Data Protection &amp; Privacy
 <ul>
  <li>
   Experience with
   <strong>
    Data Loss Prevention (DLP)
   </strong>
   solutions
  </li>
  <li>
   Strong understanding of data classification, sensitive data protection, and privacy controls
  </li>
  <li>
   Experience implementing data security policies and compliance requirements
  </li>
 </ul>
 Encryption &amp; Key Management
 <ul>
  <li>
   Strong experience with
   <strong>
    Encryption and Key Management Services (KMS)
   </strong>
  </li>
  <li>
   Knowledge of encryption standards, key lifecycle management, certificate management, and cryptographic best practices
  </li>
  <li>
   Experience securing data at rest, in transit, and during processing
  </li>
 </ul>
 Data Masking &amp; Protection
 <ul>
  <li>
   Experience implementing
   <strong>
    Data Masking
   </strong>
   techniques for protecting sensitive information
  </li>
  <li>
   Understanding of tokenization, anonymization, and privacy-enhancing technologies
  </li>
 </ul>
 Security Monitoring &amp; SIEM
 <ul>
  <li>
   Hands-on experience with
   <strong>
    Splunk or Microsoft Sentinel
   </strong>
   for security monitoring and incident detection
  </li>
  <li>
   Experience analyzing security events, alerts, logs, and threat intelligence data
  </li>
  <li>
   Knowledge of SIEM use cases, dashboards, and security investigations
  </li>
 </ul>
 Qualifications
 <ul>
  <li>
   Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
  </li>
  <li>
   <strong>
    3&ndash;11+ years
   </strong>
   of experience in Data Security, Cloud Security, Information Security, or Privacy Engineering
  </li>
  <li>
   Strong understanding of cloud security principles and enterprise security architecture
  </li>
  <li>
   Excellent analytical, troubleshooting, and communication skills
  </li>
  <li>
   Experience working with cross-functional security and technology teams
  </li>
 </ul>
 Preferred Skills
 <ul>
  <li>
   Experience with cloud security frameworks and compliance standards
  </li>
  <li>
   Knowledge of privacy regulations and data protection requirements
  </li>
  <li>
   Familiarity with security automation and incident response processes
  </li>
  <li>
   Experience securing data platforms, analytics environments, and cloud-native applications
  </li>
  <li>
   Security certifications such as CISSP, CCSP, Security+, or cloud security certifications are a plus
  </li>
 </ul>
 Key Technology Stack
 <ul>
  <li>
   <strong>
    Cloud IAM:
   </strong>
   <strong>
    GCP IAM or Azure IAM or AWS IAM
   </strong>
  </li>
  <li>
   <strong>
    Data Protection:
   </strong>
   DLP
   <strong>
    and
   </strong>
   Data Classification
   <strong>
    and
   </strong>
   Privacy Controls
  </li>
  <li>
   <strong>
    Encryption &amp; Security:
   </strong>
   Encryption
   <strong>
    and
   </strong>
   KMS
   <strong>
    and
   </strong>
   Key Lifecycle Management
  </li>
  <li>
   <strong>
    Data Privacy:
   </strong>
   Data Masking
   <strong>
    and
   </strong>
   Tokenization
   <strong>
    and
   </strong>
   Sensitive Data Protection
  </li>
  <li>
   <strong>
    Security Monitoring:
   </strong>
   <strong>
    Splunk or Microsoft Sentinel
   </strong>
  </li>
  <li>
   <strong>
    Security Operations:
   </strong>
   SIEM Monitoring
   <strong>
    and
   </strong>
   Threat Detection
   <strong>
    and
   </strong>
   Incident Response
  </li>
  <li>
   <strong>
    Cloud Security:
   </strong>
   Cloud Security Controls
   <strong>
    and
   </strong>
   Access Governance
   <strong>
    and
   </strong>
   Compliance Management
  </li>
 </ul>
</div>


Data Security & Privacy Engineer

Innospec Inc.

<div>
 <p>
  The Operational Cyber Support Engineer provides dedicated cyber security support for U.S. operations during U.S. business hours. This role supports security controls, incident response, threat analysis, and cyber security initiatives to help keep systems secure, compliant, and resilient.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Essential Function
  </strong>
 </p>
 <ul>
  <li>
   Configure, support, and maintain cyber security controls, including Conditional Access, Microsoft Defender XDR, Microsoft Sentinel, identity protection tools, and vulnerability management solutions.
  </li>
  <li>
   Monitor security environments to detect, assess, and respond to emerging threats, cyber events, and potential intrusions.
  </li>
  <li>
   Lead or support incident response and threat analysis activities during U.S. business hours.
  </li>
  <li>
   Support compliance with applicable regulatory, audit, and cyber security framework requirements.
  </li>
  <li>
   Maintain technical documentation, architecture patterns, operational procedures, and security standards.
  </li>
  <li>
   Promote secure-by-design practices for new platforms, systems, services, and technology implementations.
  </li>
  <li>
   Collaborate with infrastructure, application, and IT operations teams to strengthen governance and cyber security practices.
  </li>
  <li>
   Provide technical guidance and knowledge transfer to improve internal cyber security capabilities.
  </li>
  <li>
   Support technology projects and new system implementations for U.S. offices in a secure and compliant manner.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Role Requirement
  </strong>
 </p>
 <ul>
  <li>
   Experience supporting and deploying Microsoft 365 security solutions, including identity management, Microsoft Defender, and Microsoft Sentinel.
  </li>
  <li>
   Strong working knowledge of Azure, Microsoft 365, cloud security environments, and related security administration practices.
  </li>
  <li>
   Ability to analyze event logs, identify potential cyber threats or intrusions, and respond appropriately to security incidents.
  </li>
  <li>
   Hands-on experience with cyber security tools such as SIEM, IDS/IPS, antivirus, endpoint protection, Microsoft Sentinel, and Microsoft Defender for Endpoint.
  </li>
  <li>
   Understanding of cyber security standards, legislation, regulations, audit requirements, and compliance frameworks such as ISO 27001 and NIST CSF.
  </li>
  <li>
   Ability to develop clear technical documentation, standards, and operational procedures.
  </li>
  <li>
   Strong troubleshooting and problem-solving skills, with the ability to assess risk and recommend practical solutions.
  </li>
  <li>
   Customer-focused approach with the ability to effectively support internal IT teams and business users.
  </li>
  <li>
   Strong written and verbal communication skills, with the ability to explain technical information clearly.
  </li>
  <li>
   Preferred certifications include Microsoft security certifications such as SC-200, SC-300, AZ-500, SC-401, or SC-100; ISC2, GIAC, or ITIL Foundation certification is also desirable.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Environmental Restrictions
  </strong>
 </p>
 <ul>
  <li>
   Ability to perform essential job duties in both indoor and outdoor environments, including offices, facilities, and external job sites.
  </li>
  <li>
   Regular exposure to varying weather conditions, noise, dust, moving equipment, and uneven terrain
  </li>
  <li>
   Physical requirements may include sitting, standing, walking, lifting, carrying, bending, reaching, and operating tools or equipment as necessary to perform job responsibilities
  </li>
  <li>
   Regular attendance and adherence to company safety policies are required
  </li>
  <li>
   In accordance with the Americans with Disabilities Act and applicable state laws, reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.
  </li>
 </ul>
</div>


Cyber Security Engineer

Barracuda Networks

<div><div>Job ID 27- 0222</div><div>
</div><div></div><div>
Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.</div><div>
</div><div>
We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.<br>
</div><div></div><div><b>
Envision yourself at Barracuda:</b></div><div>
</div><div>
Barracuda XDR is seeking a passionate and seasoned <b>Cybersecurity Engineer</b> to help us deliver excellent threat research, detection capabilities, and incident response guidance to our customers. You must possess a strong background in security and data engineering, automation, use-case development, threat hunting, and attack simulation. This is a unique opportunity to work with over 40 different cloud, endpoint, and network data sources blending security knowledge with data engineering. Our global 24x7 SOC team is innovative, competitive, and committed to continuous improvement. We are looking for candidates with strong communication, support, and leadership skills. This role requires flexibility and an eagerness to learn new technologies</div><div><b>
</b></div><div><b>
What you&rsquo;ll be working on:</b></div><div><i>
</i></div><ul><li>
Detection engineering and use-case development.
</li><li>ETL, normalization, SQL, python notebooks, anomaly detection.
</li><li>Emerging threat research and threat intelligence gathering.
</li><li>SOC tier 3 escalation support.
</li><li>Security orchestration, automation, and response (SOAR).
</li><li>Adversarial emulation and ethical hacking.
</li><li>Incident response and report writing.
</li><li>Fun cutting-edge security projects.</li></ul><div><b>
What you bring to the role:</b></div><div>
</div><div>
Strong foundation in security operations, which provides the context for advanced engineering projects within the Barracuda XDR SOC.<br>
</div><div>
Security Operations</div><ul><li>
At least 4-6 years of experience working for a SOC or CIRT is required.
</li><li>Comfortable and confident leading complex security investigations.
</li><li>Strong threat hunting abilities in SIEM solutions such as Elastic or Splunk.
</li><li>Basic hands-on experience with Kali Linux and other offensive security tools.
</li><li>Experience working with API-based integrations or SOAR applications.
</li><li>Basic familiarity with cloud services such as AWS and Azure and network technologies like the TCP/IP stack, firewall management, IDS/IPS, and log collection techniques.</li></ul><div>
 Security and Data Engineering</div><ul><li>
At least 2 years of experience with CICD, Python and SQL is required.
</li><li>Deep understanding of end-to-end detection engineering: research, development, automation, testing (Attack-and-Defend), and documentation.
</li><li>Familiarity with platforms such as Elastic and Databricks is preferred.</li></ul><div>
 General Requirements</div><ul><li>
Strong verbal and written communication skills.
</li><li>Willingness to work across time zones when required &ndash; we have team members in US East and Ireland also.
</li><li>Experience with publishing blogs, Github projects, and speaking engagements.
</li><li>A college degree in Computer Science, Data Science, Cybersecurity, or a related domain.
</li><li>Relevant security industry certifications such as CySA+, PNPT, or eJPT are preferred</li></ul><div><b>
What you&rsquo;ll get from us:</b></div><div>
</div><div>
A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility &ndash; there are opportunities for cross training and the ability to attain your next career step within Barracuda.</div><div>
</div><ul><li>
Equity, in the form of non-qualifying options
</li><li>High-quality health benefits
</li><li>Retirement Plan with employer match
</li><li>Career-growth opportunities
</li><li>Flexible Time Off and Paid Time Off benefits
</li><li>Volunteer opportunities</li></ul><div>
The anticipated salary range for this role is 105,000 to 140,000. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws.</div><div>
</div><div></div><div>
At Barracuda, we believe in fair and equitable compensation practices that reflect both market realities and the unique circumstances of each geographical location. We recognize that cost-of-living disparities, market conditions, and other factors can significantly impact compensation expectations in different regions. The compensation range provided in this job description is for illustrative purposes only and may not reflect the actual compensation offers for the position in your location. Final compensation will be determined based on a variety of factors including the candidates&rsquo; qualifications and experience.<br>
</div><div></div><div>
#LI-remote</div></div>

Cybersecurity Engineer

Sound Credit Union

<div><div><div>Sound Credit Union is currently seeking an <b>Information &amp; Cyber Security Engineer</b> to join our team! If you have a passion for securing IT systems and infrastructure while working collaboratively across teams, then this position at Sound might be the ideal opportunity for you. We offer a welcoming environment with opportunities for professional growth, a passion for community involvement and great benefits to support employee wellbeing.</div></div><p>
</p><p></p><div><div><b><i>Your Compensation:</i></b><br>
Our pay ranges are built to allow for candidates with various levels of skill and experience to be considered and provide room for growth over time. The target salary range for this position is $92,000 - $115,000, depending on previous experience and education. The full salary range is $92,000 &ndash; $138,000.</div></div><p>
</p><p></p><div><div><b><i>Why Work with Us:
</i></b><br>
We stand by our purpose to support our members, employees, and communities through all waves of life. We pride ourselves on fostering a workplace that celebrates diversity and inclusivity, ensuring that every voice is heard and valued. <b><i>Learn more about our company culture on our career's page!</i></b><b><i>
</i></b></div></div><p></p><div><div><b><i>Your Benefits:</i></b></div></div><ul><li><div>
100% employer paid premiums for medical, dental, vision, and disability for yourself and more than 70% for dependent&rsquo;s premiums.</div></li><li><div>
401k match dollar for dollar up to 4% &ndash; <i>plus</i> an additional discretionary profit share.
</div></li><li><div>Three weeks Paid Time Off (PTO) accrued annually to start, with increases over tenure.
</div></li><li><div>Up to 40 hours of employer paid Work/Life Balance time, awarded annually.
</div></li><li><div>10 employer paid Federal Holidays every year.</div></li><li><div>
Up to 3% annual salary equivalent annual bonus may be awarded when the Credit Union meets its goals, paid each November.</div></li><li><div>
Up to $50/month gym/lifestyle reimbursement.
</div></li><li><div>Up to $5,000/year Tuition Assistance Program.
</div></li><li><div>Incentives for multilingual speakers.
</div></li><li><div>Employee Assistance Program (EAP) and Virtual Behavioral &amp; Mental Health Services.</div></li><li><div>
Free and/or discounted banking services and loans.</div></li><li><div>
Employee Charitable Matching Program.
</div></li><li><div>Free ORCA pass.
</div></li></ul><p></p><div><div><b><i>What You&rsquo;ll Do:</i></b></div></div><div><div>
Responsibilities:
</div></div><ul><li><div>Lead and support the implementation, integration, configuration, and maintenance of cybersecurity tools and controls.</div></li><li><div>
Monitor, investigate, and respond to security threats and incidents.</div></li><li><div>
Collaborate with IT and business stakeholders to ensure compliance with cybersecurity frameworks and regulatory requirements.</div></li></ul><div><div>
Requirements:
</div></div><ul><li><div>3+ years of experience in Cybersecurity, Security Operations, or IT Infrastructure with a security focus required.
</div></li><li><div>High School Diploma or equivalent required.
</div></li><li><div>A bachelor&rsquo;s degree in Cybersecurity, Information Technology, a similar field, or an equivalent combination of education and experience is required.</div></li><li><div>
Cybersecurity certification(s) preferred &ndash; (CompTIA Security+, CC, SSCP, CCSP, CISSP, CASP+, etc.).</div></li></ul><div><div>
In addition:</div></div><ul><li><div>
Must be bondable.</div></li><li><div>
Employer sponsorship to secure or maintain employment authorization is not available.</div></li></ul><p>
</p><p></p><div><div><b><i>Our Hours:
</i></b></div></div><div><div>A hybrid schedule: Monday &ndash; Friday, 8 AM &ndash; 5 PM.</div></div><div><div>
This position works 40+ hours per week as business needs dictate.</div></div><div><div>
In your role you will have the ability to combine in-person and remote work.
</div></div><p></p><div><div><b><i>About Sound Credit Union&hellip;
</i></b></div></div><div><div>Sound Credit Union was founded in 1940 and is one of Washington State&rsquo;s largest credit unions. We have 26 full-service branches located throughout the Puget Sound region. We live by our Guiding Principles of <i>Make a Connection, Be a Champion, and Doing the Right Thing</i> for our members, employees, and community. Visit our website at: https://www.soundcu.com/careers/ to apply.
</div></div><p></p><div><div><b><i>The Future is in Our Hands&hellip;
</i></b><br>
Sound Credit Union is proud to be an Equal Opportunity employer that values and celebrates the unique perspectives and experiences each person brings to our team. We welcome talent from all walks of life and actively foster an inclusive workplace where every team member can thrive and belong.</div></div><div><div>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, veteran status, disability, age or any other protected status. We believe our differences make us stronger and are committed to building a team that represents a variety of backgrounds, perspectives, and skills.</div></div></div>

Information and Cyber Security Engineer

Accenture

<div>
 <strong>
  About Accenture
  <br/>
  <br/>
 </strong>
 Accenture is a leading global professional services company that helps the world&rsquo;s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services&mdash;creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world&rsquo;s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy &amp; Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360&deg; value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360&deg; value we create for our clients, each other, our shareholders, partners and communities. Visit us at www.accenture.com.
 <br/>
 <br/>
 <strong>
  Accenture Security
  <br/>
  <br/>
 </strong>
 Join Accenture Security to pioneer security solutions that blend risk strategy, digital identity, cyber defense, application security and managed services. Using the coolest next-gen tech, you&rsquo;ll have every chance to stay one step ahead of cybercrime and out-hack the hackers.
 <br/>
 <br/>
 Accenture Security provides comprehensive security services &ndash; from security strategy development to business transformation, to managed security services &ndash; on demand and at a global scale to help mitigate risks and take full advantage of advanced technologies and proven risk management models. Our experienced team of global security professionals helps businesses understand their risks and build resilience from the inside out, giving them the confidence to focus on what matters most: innovation and business growth.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Design, implement, and optimize Google SecOps (Chronicle SIEM and SOAR) solutions to strengthen client security monitoring and response capabilities.
  <br/>
 </li>
 <li>
  Serve as a Google SecOps subject matter expert, leading solution design, data modeling, and platform configuration in alignment with defined client and service requirements.
  <br/>
 </li>
 <li>
  Develop, tune, and maintain detection rules and logic using YARA‑L and Chronicle native capabilities to improve threat visibility while minimizing false positives and operational noise.
  <br/>
 </li>
 <li>
  Design, implement, and maintain SOAR playbooks within Google SecOps to automate alert enrichment, investigation workflows, and approved response actions.
  <br/>
 </li>
 <li>
  Integrate Google SecOps with cloud, endpoint, network, and third‑party security tools to enable scalable and comprehensive threat detection coverage.
  <br/>
 </li>
 <li>
  Troubleshoot complex data ingestion, parsing, correlation, and platform issues within Google SecOps to ensure data integrity, reliability, and continuity of security monitoring.
  <br/>
 </li>
 <li>
  Own platform operability by ensuring the reliability and quality of log ingestion and integrations, and delivering standardized operational health outputs to support service oversight and stakeholder decision‑making.
  <br/>
 </li>
 <li>
  Manage controlled deployment of detections, parsers, integrations, and playbooks using version control and defined release practices to ensure stable, auditable changes across environments.
  <br/>
 </li>
 <li>
  Create and maintain technical documentation, operational procedures, and implementation artifacts aligned to Google SecOps platform standards and service governance requirements.
  <br/>
 </li>
 <li>
  Act as the senior technical point for client‑facing SIEM and SOAR troubleshooting, providing clear root‑cause analysis and remediation guidance for complex platform issues
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Requirements
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Bachelor&rsquo;s degree in Computer Science, Information Security, Cyber Security, or a related field, or equivalent practical experience.
  <br/>
 </li>
 <li>
  Hands‑on experience in security operations or detection and response environments, supporting SIEM‑based monitoring and incident workflows.
  <br/>
 </li>
 <li>
  Strong practical experience with SIEM platforms, including rule development, tuning, data onboarding, and investigation support.
  <br/>
 </li>
 <li>
  Hands‑on experience with SOAR platforms, including playbook development, automation of response actions, and workflow optimization.
  <br/>
 </li>
 <li>
  Ability to troubleshoot complex platform, data quality, and integration issues across multiple security technologies.
  <br/>
 </li>
 <li>
  Strong collaboration skills, with the ability to work effectively with SOC analysts, incident responders, and engineering teams.
  <br/>
 </li>
 <li>
  Preferably strong proficiency with Google SecOps (Chronicle SIEM and SOAR), with working knowledge of YARA‑L or similar detection languages, and experience using Git for version control and deployment of detections, playbooks, or configurations.
  <br/>
 </li>
 <li>
  Experience supporting client‑facing troubleshooting activities for SIEM and SOAR platforms.
  <br/>
 </li>
 <li>
  Security‑related certifications are a plus.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 At Accenture, you will be part of a global network of security professionals, working on advanced security initiatives and contributing to impactful, large-scale security programmes. You will have access to cutting-edge tools, continuous learning, and opportunities to grow your cybersecurity career.
 <br/>
 <br/>
</div>


SIEM and SOAR Platform Engineer

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>Top Secret/SCI</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Springfield, Virginia</div>
<i>(</i><i>Onsite Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Analytics</p>
</div><div><p>ArcSight SIEM</p>
</div><div><p>ElasticSearch</p>
</div><div><p>Kibana</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ223514</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Pipeline</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>GDIT is seeking a motivated, career and customer-oriented Cybersecurity Operations Specialist to perform on our Cybersecurity Data Analysis Services team in Springfield, VA.</p>
<p></p><p>The team member shall provide cybersecurity data analysis services, which designs, develops, builds, tests, configures, employs, operates, integrates, sustains, and refreshes the Security Information Events Management (SIEM) capability (i.e. Enterprise Audit), long-term analytics platform, log aggregation platform, and the cyber threat intelligence capability, signature development and deployment, and reputation management services. This includes the onboarding of all new and existing IT resources, and ensuring the correct routing of all audit events to mission partners in accordance with Intelligence Community Standards (ICS) 500-27.</p>
<p></p><p>Job Duties Include:</p>
<p></p><ul><li>Provide all preventative and corrective maintenance to ensure consistent, reliable, and secure service availability. This includes all actions required to return the service to full operational capability such as vendor RMA processes, removal and proper disposal of broken equipment/software, installation and testing of new equipment/software, and configuration of new equipment/software</li>
<li>Maintain system availability and reliability with a threshold of 99.99%</li>
<li>Detect and ticket degradations (volume/velocity) of all SIEM data flows within 60 minutes of the start of the degradation</li>
<li>Perform day-to-day maintenance, and specific scheduled maintenance activities that result from manufacturers recommended service intervals, alerts, bulletins, available patches, and updates according to agency approved change management processes. This includes maintaining updated documentation, change logs, and service bulletin libraries for all supported equipment and software in the CSOC knowledge management platform</li>
<li>Execute emergency maintenance actions with sufficient urgency to preclude unacceptable outage durations, approved by the Government prior to execution, and coordinated through and approved by CSOC and ESC government management</li>
<li>Perform all development, engineering, testing, integration, and implementation actions necessary for major vendor revisions</li>
<li>Perform continuous engineering assessments to improve the performance, effectiveness, coverage, and maturity of this service.</li>
<li>Retain documentation regarding loss of event logs (e.g. June 5-7th DNS logs were not ingested from SBU and are lost)</li>
<li>Configure all assets assigned to this service within the Government Furnished Information - Software Tools list in accordance with all Federal, DoD, IC, and NCE laws, directives, orders, polices, guidance, procedures etc.</li>
<li>Perform all development, design, engineering, testing, integration, and implementation actions needed for the total integration and interoperability between all applicable assets in the Government Furnished Information - Software Tools list. This includes ensuing all data flows are properly parsed for ingestion/transmission to internal and external automated reporting systems (e.g. JFHQ DoDIN &ndash; Joint Incident Management System, DoD CIO &ndash; DoD Scorecard/Get to Green reporting, IC CIO &ndash; Cybersecurity Performance Evaluation Model reporting, etc.)</li>
<li>Utilize agency approved ticketing systems to document, track, assign, update, and coordinate all engineering, integration, configuration, and maintenance actions</li>
<li>Use various monitoring, analysis, and visualization tools to track effectiveness, status, performance metrics, and other information as needed or required by Government staff and contractors assigned Cybersecurity Operations Services and Cybersecurity Readiness Services</li>
</ul><p></p><p>Required Skills:</p>
<ul><li>SIEM experience with one of the following ArcSight, ElasticSearch, Splunk, Event Broker, User Behavioral Analysis (UBA)</li>
<li>Experience providing support to Cybersecurity Operations Cell (CSOC) in creating alerting rules</li>
<li>Create SIEM playbooks</li>
<li>Linux (RHEL) Expert (administration and engineering)</li>
<li>Proficient in manipulating SIEM filters to better find and analyze potential malicious/atypical activity and reduce false positives</li>
<li>Experience with content development within ArcSight and Kibana to facilitate Cyber Analysts ability to investigate malicious events</li>
<li>Creation of ArcSight rules based on use cases of malicious events</li>
<li>Tuning and aggregation of queries and filters</li>
<li>Skilled in troubleshooting event flow through Enterprise Audit infrastructure</li>
<li>Skilled in troubleshooting event format and parsing for ingest into data storage and into SIEM tools</li>
</ul><p></p><ul><li>Active TS/SCI Clearance</li>
<li>DoD 8570.01-M IAT Level II and CSSP Infrastructure Support certifications</li>
<li>6+ years Experience with SIEM and Development Projects</li>
<li>6+ years Experience with SIEM support for projects and technical exchange meetings</li>
<li>6+ years Experience developing and maintaining enterprise audit projects</li>
</ul><p></p><p><b>Desired Skills:</b></p>
<ul><li>Kibana</li>
<li>Data Analytics</li>
</ul></div></div><p></p><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>6 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>None</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $128,039 - $173,229. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

Group-IB

<div>
 Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company&rsquo;s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.
 <br/>
 <br/>
 Group-IB&rsquo;s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
 <br/>
 <br/>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 This role combines deep technical expertise with real impact on customers&rsquo; cybersecurity resilience. As part of Group-IB&rsquo;s global delivery team, you will be at the forefront of deploying and maintaining cutting-edge threat detection technologies - Group-IB XDR and Group-IB BEP - across complex enterprise infrastructures. You will directly influence the security posture of major clients by ensuring flawless product operation, leading implementations, and resolving incidents in real time. This position is ideal for those who enjoy hands-on work with modern cybersecurity stacks, servers, network infrastructure, and virtualization platforms, while continuously collaborating with R&amp;D, Product, and Threat Intelligence teams.
 <br/>
 <br/>
 <strong>
  YOUR MISSION
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Deploy and configure Group-IB XDR and Group-IB BEP for enterprise customers (on-premises and hybrid environments).
  </li>
  <li>
   Conduct installation, integration, and initial configuration of servers, hypervisors, and network components.
  </li>
  <li>
   Perform system diagnostics, troubleshoot hardware and software issues, and ensure platform stability.
  </li>
  <li>
   Manage network and email traffic sources (SPAN, TAP, SMTP, O365, Google Mail, etc.) for product integration.
  </li>
  <li>
   Collect and analyze logs, traffic captures, and system data to identify and resolve operational issues.
  </li>
  <li>
   Support pilots and production rollouts, including remote and on-site assistance.
  </li>
  <li>
   Collaborate with Group-IB Product and Development teams to escalate and reproduce complex issues.
  </li>
  <li>
   Prepare technical documentation and communicate implementation progress to customers in English.
  </li>
  <li>
   Maintain high customer satisfaction by providing timely, professional, and effective technical support.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What We Are Looking For
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong hands-on experience with Linux (Arch/Ubuntu) and Windows Server administration.
  </li>
  <li>
   Confident understanding of networking fundamentals: TCP/IP, VLANs, SPAN/RSPAN, GRE, VPN, routing, DHCP, DNS, ARP, and TCP flags.
  </li>
  <li>
   Practical knowledge of firewalls (iptables, nftables, UFW, Windows Firewall).
  </li>
  <li>
   Experience with OpenVPN, WireGuard, and secure remote access configuration.
  </li>
  <li>
   Experience with virtualization platforms (ESXi, Hyper-V): VM deployment, networking, and export.
  </li>
  <li>
   Proficiency with diagnostic tools (tcpdump, Wireshark, curl, openssl) and log analysis (journalctl, Event Viewer).
  </li>
  <li>
   Ability to write and execute scripts in Bash and PowerShell.
  </li>
  <li>
   Understanding of email infrastructure: MX records, SPF, DKIM, DMARC, and mail routing. Familiarity with Active Directory, GPO management, and SSH configuration.
  </li>
  <li>
   Experience working with issue-tracking systems (JIRA).
  </li>
  <li>
   English level: B2 or higher &mdash; both spoken and written, with confidence in technical communication.
  </li>
  <li>
   Native-level proficiency in Arabic (both written and spoken), with strong business and technical communication skills.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What Sets You Apart
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Knowledge of microservice vs monolithic application architecture.
  </li>
  <li>
   Understanding of IPMI (iDRAC/iLO) and BIOS setup for server provisioning.
  </li>
  <li>
   Ability to perform basic hardware replacement (memory, RAID controller, NIC).
  </li>
  <li>
   Strong analytical mindset and structured approach to troubleshooting.
  </li>
  <li>
   Readiness for occasional business travel to customer sites.
  </li>
  <li>
   A passion for cybersecurity and continuous learning in the field of threat detection and response.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Core Competencies
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong problem-solving mindset and attention to detail.
  </li>
  <li>
   Ability to structure complex information and communicate it clearly to both technical and non-technical audiences.
  </li>
  <li>
   High sense of ownership and accountability for assigned projects.
  </li>
  <li>
   Adaptability and composure when working under pressure or during critical incidents. Customer-oriented approach and willingness to go the extra mile to resolve issues.
  </li>
  <li>
   Team player with strong collaboration and communication skills.
  </li>
  <li>
   Curiosity and continuous drive for professional growth in cybersecurity.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  WHY CHOOSE GROUP-IB
  <br/>
  <br/>
 </strong>
 Group-IB is a global leader in cybersecurity technologies that investigate, predict, prevent, and fight digital crime. We help organizations reduce risk and protect trust. Trusted by governments, major industries, and law enforcement, we deliver adversary-focused, predictive threat intelligence and cyber fraud fusion solutions that detect, analyse, and mitigate regional and country-specific digital crimes.
 <br/>
 <br/>
 <ul>
  <li>
   Work with real stakes. Group-IB investigates active cybercriminal groups, responds to breaches affecting critical infrastructure, and develops technologies used by law enforcement agencies including INTERPOL, Europol, and Afripol across 60+ countries. We've conducted 1,550+ cybercrime investigations alongside 600+ enterprise customers globally. When you join Group-IB, your work directly disrupts digital crime.
  </li>
  <li>
   Grow your way. Choose your own path: deepen your craft as a technical expert, step into leadership, move across to another team, or relocate to one of our Digital Crime Resistance Centers across the Americas, Europe, the Middle East &amp; Africa, Central Asia, and the Asia-Pacific. Your growth is our growth &mdash; Group-IB's expansion across 60+ active country operations means real career acceleration.
  </li>
  <li>
   We fund professional certifications at company expense &mdash; whether you're pursuing CEH, CISSP, OSCP, or specialized certifications in forensics and penetration testing. You don't have to choose between doing the job and advancing your credentials.
  </li>
  <li>
   Work alongside industry leaders. Our Unified Risk Platform &mdash; Threat Intelligence, Digital Risk Protection, Attack Surface Management, Managed XDR, and more &mdash; is recognized by Gartner, Forrester, KuppingerCole, and Datos Insights. Frost &amp; Sullivan named us a 2025 Global Technology Innovation Leader. When you work here, you're building technologies that set the industry standard.
  </li>
  <li>
   Real challenges, real expertise. You'll take on complex, real-world problems alongside adversary-centric researchers and incident response experts spread across six continents. We've built 21+ years of proprietary telemetry through 1,500+ joint investigations. No two threats look alike &mdash; and neither do the skills you'll develop.
  </li>
  <li>
   A team that is genuinely international. Our people come from different countries, speak different languages, and bring different perspectives. What connects us is a shared mission: fighting cybercrime and making the world safer. We care about your wellbeing and happiness as much as your output.
  </li>
 </ul>
</div>


Implementation Engineer

Search 6667+ Security operations engineer jobs near you this August. New roles added regularly across leading industries. Apply today.