Monitor, investigate, and respond to cybersecurity threats across enterprise and AWS environments. Analyze alerts using SIEM, EDR, and AWS security tools; investigate account misuse, malware, network activity, and indicators of compromise; conduct threat hunting; document findings; escalate incidents; and improve SOC detections, playbooks, and processes.

Monitor and analyze SIEM alerts, develop and tune detection rules, dashboards, searches, and correlation logic, and investigate events across multiple log sources. Support log onboarding, parsing, normalization, validation, troubleshooting, threat hunting, incident investigations, reporting, and documentation. Improve security visibility and reduce false positives while collaborating with SOC analysts, engineers, and cybersecurity teams. The role requires extensive cybersecurity and SIEM experience plus an active TS/SCI clearance.

Plans, coordinates, and manages IT infrastructure and communication network projects, including schedules, costs, staffing, deliverables, service orders, and contractual performance. Develops project management plans, oversees technical integration and installation activities, tracks implementation through completion, prepares status reports, and resolves project blockers. The role manages contract personnel and supports long-term program objectives in a DoD or intelligence-community environment.