SOC SIEM/Cloud Engineer
📌Oak Ridge, United States 🇺🇸
⏱︎ full-time
🧙♂️ mid-level
💰 80001
remote
Location: REMOTE WORK, TN, US
Date Posted: 2025-08-05
Category: Cyber
Subcategory: Cybersecurity Spec
Schedule: Full-time
Shift: Day Job
Travel: No
Minimum Clearance Required: None
Clearance Level Must Be Able to Obtain: Secret
Potential for Remote Work: Yes
Description
We provide advanced cybersecurity monitoring and engineering support to a wide range of government agencies through a multi-tenant MSS model. Our Security Operations Center (SOC) operates 24/7, leveraging Microsoft Sentinel as the core SIEM platform. However, we increasingly support hybrid and multi-cloud environments including AWS and Splunk, and we are seeking a cloud-savvy SIEM engineer to help us grow and maintain secure, scalable monitoring capabilities.
As a SOC SIEM/Cloud Engineer, you will serve as one of the primary engineers for multi-cloud SIEM operations in a managed security services environment. While Microsoft Sentinel remains our core SIEM platform, you will also support AWS-native security tooling and Splunk-based environments. This role emphasizes cross-cloud log ingestion, automation, and security detection engineering. Candidates must be self-directed, security-minded, and comfortable designing scalable monitoring strategies across diverse architectures.
This is a remote position, but Secret clearance eligibility is required to support future classified operations, as needed.
KEY RESPONSIBILITIES:
SIEM Operations & Cloud Integration
- Administer and optimize SIEM platforms including Microsoft Sentinel, Splunk, and AWS-native tools such as CloudWatch, CloudTrail, GuardDuty, and Security Hub.
- Manage log ingestion pipelines from hybrid, cloud, and containerized environments.
-
Design alert rules, detection use cases, and enrichment pipelines using KQL, SPL, and JSON-based event structures.
- Build and maintain automation workflows using Azure Logic Apps, Splunk SOAR, and AWS Lambda/Step Functions.
- Integrate threat intelligence, reputation feeds, and context enrichment across cloud platforms.
-
Partner with SOC analysts to streamline Tier 1-2 response efforts through smart automation.
- Act as the subject matter expert on cloud security logging and architecture for Azure, AWS, and hybrid environments.
- Advise customers and internal teams on best practices for telemetry, logging policy, and compliance alignment (e.g., FedRAMP, CJIS, NIST 800-53).
-
Lead or support onboarding of cloud workloads including EC2, EKS, Lambda, Azure VMs, Kubernetes, and M365/GCC environments.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field
- 3-5+ years of SIEM engineering experience across multi-cloud environments (Azure, AWS)
- Hands-on experience with Microsoft Sentinel, AWS Security Services, and Splunk
- Experience creating alerts and detection rules in KQL, SPL, and JSON-based formats
- Familiarity with automation tools such as Logic Apps, Splunk SOAR, AWS Lambda, or Step Functions
- Strong scripting knowledge (PowerShell, Python, or Bash)
-
Must be a U.S. citizen and clearable to the Secret level
- Active Secret clearance or higher
- Microsoft Certifications: SC-200, AZ-500
- AWS Certifications: Security Specialty, Solutions Architect Associate or Pro
- Splunk Certifications: Admin, Power User
- Experience with cloud container security (EKS, AKS, Kubernetes auditing)
- Experience in multi-tenant MSSP environments or government contracts
-
Familiarity with large language models (LLMs), GenAI, or agentic AI frameworks for use in cybersecurity operations
- Fully remote work with flexibility and work-life balance
- Opportunity to contribute to classified operations with additional clearance
- Competitive compensation and benefits
- Training and certification assistance
-
Stable, mission-driven cybersecurity work supporting state and federal government agencies
Senior Embedded Software Engineer
@ Embedd 
What we're looking for
At embedd.it, we power hardware-software integration in embedded devices. We turn fragmented semiconductor chip data into configurable digital twins, then deterministically generate code, tests, and documentation – making integration faster, cheaper, and resilient to supply chain shocks.
We’re looking for a true legend – someone with abstract thinking and deep expertise in low-level software development. You’ll build vendor-agnostic tooling for MCU and peripheral integration to solve hardware-software integration once and for all. We work at the intersection of embedded systems, code generation, compilers, and machine learning. It’s your chance to help redefine how low-level development is done.
Responsibilities
- Drive the architecture of the driver structures and system layout
- Define scalable patterns for cross-architectural integration across bare-metal, Zephyr, Linux, and other environments
- Deconstruct complex SoC device trees and translate hardware descriptions into structured internal models for automated reasoning
- Partner with the ML team to shape data and annotation models for AI-driven data-extraction tooling
Qualifications
- 5+ years of experience in embedded systems development, including bare-metal and RTOS-based systems
- Proficiency in C/C++
- Familiarity with firmware configuration, SoC bring-up, and system-level debugging
- Hands-on experience with code generation tools, or low-level compiler/decompiler/emulator technologies
- Strong background in embedded toolchains: compilers, linkers, debuggers, and build systems
- Python or scripting for automation and tooling is a plus
- Experience with functional-safety standards is a plus
Why embedd.it?
- Dynamic, venture-backed team of engineers challenging the status quo 🚀
- Work at the intersection of embedded systems, code generators, compilers, and ML 🤖
- Unusual challenges requiring out-of-the-box abstract thinking 🧠
- Competitive compensation: cash + equity 💰
- Remote work possible 🌍
About Us
embedd.it is a UK-based startup reinventing embedded development. Our platform transforms unstructured semiconductor data into structured digital twins, enabling automatic generation of drivers, tests, and documentation. We're building a single, traceable source of truth to make integration fast, vendor-agnostic, and future-proof.
Other similar jobs
C++ GPU Modelling Engineer
@ AMD, 📍United States 🇺🇸
GPU Systems Software Engineer - Cork, Ireland
@ Qualcomm, 📍United States 🇺🇸
Embedded Software Engineer
@ Actalent, 📍United States 🇺🇸
Embedded Software Engineer
@ Abbott, 📍United States 🇺🇸
Embedded Software Engineer
@ Actalent, 📍United States 🇺🇸
Embedded Software Engineer FCS & FMS
@ Airbus, 📍United States 🇺🇸
Junior R&D Software/Firmware Engineer - C++
@ Agilent Technologies, 📍United States 🇺🇸
Embedded Software Development Engineer, Ring
@ Amazon, 📍United States 🇺🇸
Embedded Software Engineer FCS & FMS
@ Airbus, 📍United States 🇺🇸
Embedded Software Engineer II, Ring
@ Amazon, 📍United States 🇺🇸
-
Employment
⏱︎ full-time
-
Experience
🧙♂️ mid-level
-
Salary
💰 80001
-
Working model
remote
-
Skills
-
Industry
-
Find similar jobs
C++ GPU Modelling Engineer
@ AMD, 📍United States 🇺🇸
GPU Systems Software Engineer - Cork, Ireland
@ Qualcomm, 📍United States 🇺🇸
Embedded Software Engineer
@ Actalent, 📍United States 🇺🇸
Embedded Software Engineer
@ Abbott, 📍United States 🇺🇸
Embedded Software Engineer
@ Actalent, 📍United States 🇺🇸
Embedded Software Engineer FCS & FMS
@ Airbus, 📍United States 🇺🇸
Junior R&D Software/Firmware Engineer - C++
@ Agilent Technologies, 📍United States 🇺🇸
Embedded Software Development Engineer, Ring
@ Amazon, 📍United States 🇺🇸
Embedded Software Engineer FCS & FMS
@ Airbus, 📍United States 🇺🇸
Embedded Software Engineer II, Ring
@ Amazon, 📍United States 🇺🇸