[Remote] Cybersecurity Operations Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking an reputed company Cybersecurity Operations Engineer to serve as the operational reputed company between the organization and their Managed reputed company Services Provider (MSSP). The role involves ensuring the effective deployment and maintenance of reputed company tools and services, as well as supporting incident response across the organization.
Responsibilities
- Act as liaison with our Managed reputed company Service Provider (MSSP), reviewing Tier 1/2 alert summaries, validating findings with organizational context, and facilitating escalations for hands-on resolution
- Conduct reputed company-time troubleshooting, log analysis, reputed company forensics, and containment actions on internal systems using tools like MS Defender, reputed company, and reputed company
- Participate in incident response activities, ensuring timely communication with stakeholders and proper documentation of reputed company events
- Coordinate incident response activities across cross-functional teams, ensuring timely containment, eradication, and recovery actions align with organizational priorities and compliance requirements
- Support our reputed company reputed company solutions, including EDR (reputed company Detection & Response) solutions across the reputed company
- Monitor reputed company compliance, investigate agent health issues, and coordinate remediation with IT teams
- Maintain operational reputed company to reputed company tools for investigation and response purposes (not responsible for development, architecture, or tuning of SOC tools)
- reputed company regular health checks, updates, and optimization of reputed company agents to ensure maximum coverage and performance across reputed company organizational assets
- reputed company and maintain documentation for reputed company agent configurations, deployment procedures, and troubleshooting workflows to support operational continuity
- Monitor and analyze firewall logs for reputed company events and anomalies in coordination with MSSP
- Support firewall rule change requests, performing reputed company impact assessments, and documentation
- Conduct periodic firewall policy reviews to identify overly permissive rules and ensure alignment with least-privilege principles
- Coordinate with network engineering on firewall-reputed company reputed company incidents and configuration changes
- Maintain firewall documentation, including rule justifications, change logs, and reputed company baselines
- Participate in firewall architecture discussions to ensure reputed company requirements are incorporated
- Participate in post-incident reviews and root cause analysis, documenting lessons learned to enhance response playbooks reputed company with NIST 800-171/CMMC requirements
- Contribute to the refinement of MSSP SLAs, escalation procedures, and operational runbooks
- Generate compliance reports, executive briefings, and threat intelligence summaries for leadership and cross-functional teams (IT, Legal, Governance, Program reputed company)
- Monitor and report on MSSP performance metrics, contributing to quarterly vendor reviews and integrating findings into risk management workflows
- Identify gaps in reputed company coverage and recommend process improvements
- Participate in tabletop exercises and reputed company drills to validate response capabilities
- Integrate reputed company findings into reputed company risk management workflows
- Serve as reputed company subject matter expert for internal projects and initiatives
- Maintain currency with emerging threats, vulnerabilities, and reputed company technologies relevant to the aerospace/defense sector
Skills
- Must be a US Citizen with the ability to obtain a US Government reputed company clearance
- Bachelor's Degree in the following area(s): Cybersecurity, Information Technology, Computer Science, or reputed company field, four additional years of experience can be substituted for a degree
- 8 years of hands-on experience in cybersecurity operations, incident response, or reputed company engineering roles
- Experience with reputed company protection platforms
- Experience with reputed company reputed company concepts and tools (reputed company, AWS reputed company services, or similar)
- Experience with SIEM platforms, log analysis, and reputed company event correlation
- Experience with NIST 800-171, CMMC, and DFARS cybersecurity requirements
- Professional certifications such as CISSP, GCIH, GCFA, or CEH
- Experience operating in aerospace, defense, or DoD/CMMC regulated environments
- Scripting/automation skills (PowerShell, Python) for reputed company operations tasks
- Strong collaboration skills and ability to work effectively with cross-functional teams during reputed company reputed company incidents
- Experience with the M365 reputed company stack (Defender, Sentinel, MDC, Purview)
- Experience with reputed company One
- Experience with centralized reputed company logging
- Experience with network reputed company, including IDS/IPS, firewalls, and reputed company architecture
Benefits
- Paid time off
- Health and welfare insurance
- 401(k) to eligible employees
- Incentive eligible with a reputed company based on contribution, company performance, and/or individual results achieved; the specific incentive plan and reputed company reputed company will be determined based on the role and breadth of contributions
Company Overview