Cyber Security Engineer

Location: Orlando, FL, United States

Company

Seneca Technologies is part of hirify.global’ Seneca Nation Group, a federal government contracting portfolio supporting civilian, defense, and intelligence community customers.

What you will do

• Continuously monitor SOC alerts, operational anomalies, Linux environments, network activity, and cybersecurity telemetry using enterprise SIEM technologies.
• Analyze, triage, investigate, validate, and appropriately escalate cybersecurity events and initial incidents.
• Monitor security platform health, connectivity, reporting, log ingestion, and missing or delayed log sources.
• Use dashboards, visualizations, and reports to identify security trends and operational anomalies.
• Validate Linux logging requirements, security detections, and alerting capabilities.
• Create and maintain SOPs, investigation guides, and technical documentation while collaborating on advanced investigations and incident response.

Requirements

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance required.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical field.
• At least 3 years of relevant professional experience supporting cybersecurity operations, network monitoring, enterprise Linux environments, or equivalent technical disciplines; equivalent combinations of education, certifications, military service, and relevant experience are considered.
• Experience monitoring cybersecurity alerts and investigating incidents.
• Experience supporting enterprise Linux environments and using enterprise monitoring or SIEM technologies.
• Experience documenting investigative findings in ticketing, case management, or equivalent systems.
• Ability to analyze and interpret security events to identify suspicious or malicious activity.

Nice to have

• Security+, CySA+, or equivalent certification meeting applicable Department of Defense cybersecurity workforce requirements.
• Linux+ or Elastic Certified SIEM Analyst certification.
• Experience with Elastic, Splunk, or equivalent SIEM technologies; Elastic Security, Elastic Observability, Elastic Agents, or Logstash is highly desired.
• Experience monitoring Linux environments, network security events, and cybersecurity telemetry.
• Familiarity with MITRE ATT&CK, cybersecurity frameworks, incident response processes, and investigative methodologies.
• Experience with Jira, Confluence, or comparable collaboration platforms.
• Experience supporting cybersecurity operations in government, Department of Defense, or enterprise environments.
• Experience developing dashboards, visualizations, and reporting capabilities for cybersecurity operations.

Culture & Benefits

• Collaborative work environment supporting mission-critical Department of Defense operations.
• Full-time employees working at least 30 hours per week regularly are eligible for benefits and paid leave.
• Benefits include medical, dental, vision, life and disability coverage, voluntary benefits, HSA/FSA accounts, and a 401(k) plan.
• Professional development, flexible work-life balance, performance recognition, and other employee programs are offered.