We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: / Position Title: Cybersecurity Engineer-Microsoft Sentinel Engineer Clearance: Secret Location : Alexandria, VA, Remote/Hybrid, Core hours M-F 0900 to 1430 Embark on an exciting journey with us in Alexandria, VA, where your expertise as a Microsoft Azure Sentinel Engineer will be instrumental in shaping the future of cybersecurity for the US Coast Guard (USCG). As a key member of our Endpoint Security Engineering team, you’ll lead the charge in implementing, integrating, and optimizing the Azure Sentinel SIEM, propelling our enterprise cybersecurity capabilities to unprecedented heights. This is a hybrid position requiring onsite presence 1-2 days per week based upon operational tempo. Responsibilities: Serve as the go-to expert for Microsoft Azure Sentinel, driving architectural design, engineering, and optimization services. Act as the primary point of contact with Sentinel, swiftly resolving any core service or infrastructure issues. Continuously monitor Sentinel performance, fine-tuning and optimizing applications to ensure peak performance and sustained effectiveness. Configure and oversee Sentinel data connections, ensuring seamless integration and operation. Contribute to the development and maintenance of Sentinel-related project plans. Create and deliver project status reports as requested by the government. Assist in fine-tuning Sentinel Baseline and Analytical Detection Rules for optimal threat detection. Develop and maintain comprehensive system design documentation. Analyze existing data sources and configurations to minimize ingestion costs and enhance data relevance. Design and implement robust resource planning and management strategies to ensure the scalability and serviceability of Sentinel services in future environments. Stay abreast of the latest Azure Sentinel features, security best practices, and industry trends to maintain cutting-edge expertise. Qualifications: Possess 10+ years of cybersecurity and/or cloud services engineering experience. Hold DoD 8570 IAT Level II certification or higher, coupled with relevant Azure cloud certification. Maintain an active DoD Secret clearance or higher. Possess a solid understanding of SIEM technologies, with hands-on experience in deploying and maintaining Azure Sentinel in enterprise environments. Demonstrate strong proficiency in cloud engineering, data architectures, solution testing, and integration. Familiarity with Cybersecurity Operations domains, including Computer Network Defense, Incident Response, and Cyber Threat Hunt. Exhibit excellent communication skills, both verbal and written. Seize this opportunity to be at the forefront of cybersecurity innovation and make a lasting impact on national security. Join us today and be part of a team committed to safeguarding critical infrastructure and protecting our country’s Maritime assets. Apply now to ignite your career with us! OneZero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access as a result of your disability. To request an accommodation, please contact us at or call (202) 987-2580 #J-18808-Ljbffr
SIEM Incident response Cybersecurity integration Data Architect