Cybersecurity Integration

Cybersecurity Integration Jobs

3 jobs found

Today

Security Engineer III, SIEM Engineer

Deloitte Rosslyn, VA 🇺🇸 Remote

Rosslyn, VA

Today

$103k - $189k/yr Full time Crowdstrike Cybersecurity Analysis Cybersecurity Integration

Apply Now

Job Description

Deloitte Cyber Defense and Resilience is seeking a SIEM Engineer to strengthen security monitoring and detection engineering across complex enterprise environments. The role supports incident analysis and improves alert fidelity through well-tuned SIEM content and reliable log integration.

Responsibilities

Configure, maintain, and optimize SIEM content, including correlation rules, alerts, dashboards, and reports
Analyze security events and log data to identify suspicious activity, support investigations, and expand detection coverage
Integrate and normalize log sources from endpoint, network, cloud, identity, and security platforms
Partner with cybersecurity teams to support use case development, threat detection, incident triage, and response activities
Document detection logic, operational procedures, and monitoring requirements to support consistent service delivery

Required Qualifications

Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related technical field
Active Secret Clearance
3+ years of experience in cybersecurity, security operations, or SIEM engineering
3+ years of experience with at least one of the following: Splunk, Palo Alto XSIAM, or CrowdStrike NG SIEM
2+ years experience in:
- Creating, tuning, and maintaining correlation searches, alerts, dashboards, and reports in a Security Information and Event Management platform
- Reviewing and analyzing logs from endpoint, network, cloud, identity, and application sources
Security certification such as Splunk certification, Palo Alto Networks certification, or CrowdStrike certification is required
Ability to travel up to 20%, on average
Willingness to work at client onsite or Deloitte office up to 5 days a week
Legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

Splunk
Palo Alto XSIAM
CrowdStrike NG SIEM
Splunk certification
Palo Alto Networks certification
CrowdStrike certification
Security Information and Event Management platform
MITRE ATT&CK

Work Setting

Location is Rosslyn, VA (remote). Travel up to 20% on average may be required, along with potential client onsite or Deloitte office work up to 5 days per week.

Additional Skills

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Preferred Qualifications

2+ years experience:
- Supporting enterprise monitoring in a Security Operations Center
- Onboarding and normalizing log sources in a Security Information and Event Management platform
- Mapping detections to MITRE ATT&CK techniques
- Cloud security monitoring in Amazon Web Services, Microsoft Azure, or Google Cloud Platform
- Hands-on experience with scripting or query languages used for detection and log analysis
Security certification such as CompTIA Security+ or GIAC certification

Compensation and Incentives

The salary range for this role is USD 102,500 - 188,900 per year. Deloitte may also offer eligibility to participate in a discretionary annual incentive program, subject to program rules and factors including individual and organizational performance.

Education

A Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related technical field is required.

View full job page →

6d ago

Cybersecurity Vulnerability Management Lead

Cherokee Federal Almont, CO

Almont, CO

6d ago

Full time Manager Application Security Cloud Platforms

Apply Now

Job Description

Cherokee Federal is seeking a Cybersecurity Vulnerability Management Team Lead to support the NSF Cybersecurity Program. This onsite role in Almont, CO provides technical authority to modernize vulnerability management into a threat-informed exposure management capability and to lead enterprise vulnerability operations.

Key Responsibilities

Lead and mature NSF’s vulnerability management capability across enterprise, cloud, containerized, application, and hybrid environments.
Provide technical leadership to a team of vulnerability analysts and establish a culture of accountability, ownership, collaboration, and continuous improvement.
Develop and maintain a vulnerability management roadmap aligned with evolving threats and organizational priorities.
Operationalize modern vulnerability prioritization techniques using CISA Known Exploited Vulnerabilities (KEV), EPSS, threat intelligence feeds, asset criticality scoring, internet-facing asset identification, attack path analysis, and MITRE ATT&CK mapping.
Evaluate and recommend emerging technologies to improve vulnerability validation, attack surface visibility, and exposure management.
Own end-to-end vulnerability management processes: Discovery, Validation, Prioritization, Remediation coordination, Exception handling, Verification, and Executive reporting.
Operate and optimize enterprise scanning platforms, including Tenable.sc, Tenable.io, and Nessus.
Improve scan coverage, credential management, accuracy, and false-positive reduction.
Integrate findings from cloud-native security capabilities: AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, and Microsoft Defender for Cloud.
Partner with Application Security and DevSecOps teams to support AppScan, DAST, SAST, CI/CD integrations, and container image scanning.
Mature ServiceNow Vulnerability Response capabilities, including CMDB enrichment, automated ticket creation, SLA tracking, ownership assignment, and escalation workflows.
Develop automation opportunities using APIs, Python, PowerShell, and orchestration capabilities.
Build executive dashboards and metrics including MTTR, SLA adherence, vulnerability aging, exposure trends, scan coverage, and remediation effectiveness.
Brief cybersecurity leadership on emerging risks, remediation progress, and program maturity initiatives.

Required Qualifications

8+ years of cybersecurity experience.
4+ years of direct vulnerability management experience in a federal or large enterprise environment.
3+ years leading vulnerability analysts, remediation programs, or enterprise VM initiatives.
Deep hands-on expertise with Tenable.sc, Tenable.io, and Nessus.
Experience implementing or significantly improving a vulnerability management or exposure management capability.
Experience with ServiceNow Vulnerability Response and CMDB integrations.
Experience applying modern vulnerability prioritization methodologies including CISA KEV, EPSS, threat intelligence, asset criticality, and attack path analysis.
Experience supporting AWS, Azure, or hybrid cloud environments.
Experience collaborating with Security Operations and Incident Response teams to identify and rapidly remediate actively exploited vulnerabilities.
Experience briefing technical teams, executives, and federal stakeholders.

Technologies

Tenable.sc, Tenable.io, Nessus
CISA Known Exploited Vulnerabilities (KEV), EPSS, Threat intelligence feeds, MITRE ATT&CK
AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, Microsoft Defender for Cloud
AppScan, DAST, SAST, CI/CD integrations, Container image scanning
ServiceNow Vulnerability Response, CMDB enrichment, APIs, Python, PowerShell, orchestration capabilities
ServiceNow Vulnerability Response and CMDB integrations

Highly Desired Experience

SafeBreach
AttackIQ
Pentera
XM Cyber
Wiz
Prisma Cloud
AppScan
Breach and Attack Simulation (BAS)
Continuous Control Validation (CCV)
External Attack Surface Management (EASM)
Kubernetes Security
Detection Engineering

Preferred Certifications

CISSP
GCIH
CySA+
Security+
Tenable Certified Professional
AWS Security Specialty
ServiceNow Vulnerability Response Certification

View full job page →

10d ago

Cybersecurity Integration Engineer

Peraton Beltsville, MD

Beltsville, MD

10d ago

$86k - $138k/yr Full time Cybersecurity Integration Cybersecurity Tools Data Security

Apply Now

Job Description

Peraton is hiring a Cybersecurity Integration Engineer for Federal Strategic Cyber Programs to assess, test, integrate, and transition cybersecurity solutions into enterprise security operations in a hybrid work environment.

Responsibilities

Assess, test, and integrate cybersecurity tools to support and enhance enterprise security operations
Perform system builds, installations, and functional testing for new cybersecurity technologies
Transition integrated solutions to Operations & Maintenance (O&M) teams
Develop and maintain technical documentation, including network diagrams and configurations
Provide engineering input and task estimates for cybersecurity integration efforts
Support cybersecurity risk assessments and recommend mitigation strategies
Collaborate with cybersecurity, network, and infrastructure teams to integrate solutions
Provide engineering support for Tenable vulnerability scanning and reporting tools
Monitor and evaluate emerging cybersecurity technologies for potential adoption

Requirements

Bachelor’s degree and minimum 5 years of relevant experience, or 3 years with a Master’s degree
4 additional years of relevant experience may substitute for the degree requirement
Must currently hold one of the following professional certifications (or obtain one prior to start date), with continued certification required: CAP, CASP+ CE, CCISO, CCNA-Security, CISM, CISSP (or Associate), CND, CSSLP, CySA+, GICSP, GSEC, GSLC, Security+ CE, SSCP, PPDA, Agile IC, SNOW App Dev
Demonstrated cybersecurity engineering experience, including tool integration and system hardening
Experience with RHEL Linux and Azure DevOps (Git)
Hands-on experience integrating, testing, and deploying solutions in enterprise environments
Experience supporting cloud environments such as Azure
Networking experience
Knowledge of cybersecurity frameworks and standards: NIST 800-53, RMF, FISMA
Expertise in enterprise networking protocols and concepts: TCP/IP, SMB, SFTP, DNS, DHCP, SSL, plus understanding of Layer 2/3 architectures across hybrid cloud and on-prem environments
Ability to diagnose and resolve complex network issues using advanced tools (e.g., Wireshark, tcpdump, traceroute, Splunk) in distributed systems and multi-vendor environments
U.S. citizenship required
Active Secret security clearance and ability to obtain a final Top Secret security clearance

Technologies

Tenable
RHEL Linux
Azure DevOps (Git)
Azure
NIST 800-53, RMF, FISMA
TCP/IP, SMB, SFTP, DNS, DHCP, SSL
Wireshark, tcpdump, traceroute, Splunk
Python, Bash, PowerShell
Terraform
Infrastructure as Code (IaC)
SAFe Agile

Preferred Qualifications

Experience with enterprise cybersecurity tools and platforms (e.g., Tenable, Splunk)
Familiarity with vulnerability management processes and remediation workflows
Ability to create and maintain technical documentation, including network diagrams and configuration guides
Proficiency with Infrastructure as Code (IaC) tools such as Terraform
Strong system integration experience, including testing, validation, and deployment of security solutions
Familiarity with NIST cybersecurity frameworks, RMF, and FISMA compliance
Experience supporting vulnerability management programs and integrating scanning tools into enterprise workflows
Knowledge of secure cloud architecture and migration strategies
Strong scripting skills (Python, Bash, PowerShell) for automation and tool integration
Excellent communication and collaboration skills across multidisciplinary teams
Ability to manage multiple priorities and deliver high-quality results in a fast-paced environment
SAFe Agile certification
Experience with cybersecurity programs

Location and Work Schedule

Beltsville, MD (hybrid)
Additional location listed: Rosslyn, VA
Hybrid (On-site & Remote)

Schedule and Salary

Target salary range: USD 86,000 - 138,000 per yearly

Benefits

Medical, Dental, Vision
Life
Health savings account
Short/long term disability
EAP
Parental leave
401(k)
Paid time off (PTO) for vacation
Company paid holidays

Application Details

Application period estimated at 30 days from the job posting date
During review, you may be required to participate in an on-camera interview and a process to verify identity

View full job page →

Cybersecurity Integration Jobs

Security Engineer III, SIEM Engineer

Cybersecurity Vulnerability Management Lead

Cybersecurity Integration Engineer

Get Cybersecurity Integration Jobs alerts