Lead Information Security Systems Engineer

What you'll do

• Manage security information and event management (SIEM) operations including log ingestion, alert rules, and detection tuning.
• Monitor, triage, and investigate security events across AWS, datacenter, network, endpoint, and corporate environments.
• Create and manage security incident tickets while preserving evidence and documenting findings for technical owners.
• Develop and maintain incident response plans, playbooks, runbooks, and after-action reports.
• Coordinate remediation tracking for vulnerabilities and escalate overdue or high-risk security findings.
• Conduct AWS security reviews focusing on identity management, privileged access, and cloud-security findings.
• Onboard and maintain log sources to support monitoring, detection, and compliance evidence.
• Produce security metrics, risk reports, and documentation for Risk Management Framework and audit readiness.

What we're looking for

• Active US Secret security clearance or higher.
• Bachelor's degree and minimum 9 years of relevant experience, a Graduate Degree and 7 years of experience, or 13 years of experience without a degree.
• Current certification in CISM, CISA, CCSP, CCK, or a comparable Department of Defense 8140 certification.
• Minimum 8 years of security operations, incident response, or security engineering experience.
• Demonstrated experience operating/engineering SIEM platforms, developing detection rules, and validating log ingestion.
• Demonstrated experience with incident triage, investigation, evidence handling, ticket management, and stakeholder communications.
• Demonstrated experience supporting hybrid-cloud environments including AWS and on-premises data centers.
• U.S. citizens.