Cloud Cybersecurity Engineer

Title: Cloud Cybersecurity Engineer
Clearance Required: N/A
Location: Stevensville, MD
Travel: N/A

DESCRIPTION:
Halcyon Days Consulting, LLC (HDC) is a veteran owned small business that specializes in the design and engineering of Tactical Mission Networks (TMN). This is a unique opportunity to join a small and high-performing team committed to delivering cloud platforms for exciting missions. 

HDC is seeking a Cloud Cybersecurity Engineer who will design, implement, and maintain secure cloud-based solutions, ensuring that security measures are integrated into all aspects of cloud infrastructure and applications. The role involves conducting threat and risk analysis, proactively hunting for threats securing hybrid and multi-cloud environments, and ensuring compliance with industry best practices and regulatory frameworks. 

RESPONSIBILITIES & DUTIES: 

• Perform triage and analysis of security events from SIEM, EDR, NDR, and other log sources to identify and prioritize potential threats
• Conduct incident investigations, including host and network forensics, log analysis, and evidence review using Microsoft Sentinel
• Develop and deliver daily updates and SITERPs, maintaining detailed documentation of incident status, investigative actions, and remediation recommendations
• Analyze network traffic to detect anomalous behavior, indicators of compromise, and potential malicious activity 
• Examine malicious scripts and code to identify threat behavior, vulnerabilities and potential impact

REQUIREMENTS & QUALIFICATIONS: 

• 5+ years of experience in cybersecurity, with a focus on threat detection, analysis, or incident response
• Strong understanding of advanced persistent threat (APT) actors, including their tactics, techniques, and procedures (TTPs)
• Must hold at least one of the following certifications: GCIH, Azure SC-900, GCTD, GCFR, OSCP, GREM, GEIR, or GCFA
• Experience analyzing and tracking advanced persistent threat (APT) activity, including attribution and campaign analysis
• Proficiency with packet analysis tools such as Wireshark and scripting languages including Python and PowerShell
• Familiarity with industry security frameworks and standards, including NIST, MITRE ATT&CK, and ISO 27035

DESIRED QUALIFICATIONS: 

• Experience supporting security operations within government, defense, or mission-focused environments
• Ability to develop automation or detection scripts using languages such as Python or PowerShell to improve security monitoring and response workflows
• Experience working with cloud security technologies in Microsoft Azure or Amazon Web Services, including monitoring, identity management, and security configuration
• Strong written and verbal communication skills, including the ability to prepare technical reports and incident summaries for leadership and operational teams

SALARY RANGE: 
$140,000-$180,000 
This salary range is an hourly exempt (exempt from overtime) position. Benefits are provided in addition to the salary range. 

BENEFITS:

HDC believes GREAT teams need GREAT tools!

Healthcare- Employer paid medical, dental, vision for the employee and their dependents
401k- Employer contributed 3% Safe Harbor (this benefit is contributed on your behalf even if you choose not to contribute to 401k or elect any investments), also up to 5% employer match, and 100% vested on hire date 
PTO/Holiday- 160 hours of PTO/Sick leave per year, 11 paid holidays per year 
Tuition Assistance- up to $5,250 per year

Halcyon Days Consulting, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, pregnancy, protected veteran status, sexual orientation, gender identity or expression or any other characteristic protected by federal, state or local laws. 

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.