Senior Cybersecurity Engineer - SIEM & Cloud Security at VHC Health in US-VA-Alexandria

Job description

• Job Description
• The Senior Cybersecurity Engineer to serve as a technical lead for our Security Information and Event Management (SIEM) program and cloud security engineering. This role is critical as VHC Health continues migrating clinical applications to the cloud, requiring an engineer who can design, build, and secure hybrid on-premises and cloud environments while ensuring comprehensive security visibility across the enterprise.
• The ideal candidate brings deep SIEM engineering expertise (platform-agnostic - Splunk, Microsoft Sentinel, QRadar, or similar), hands-on experience onboarding applications and data sources to a SIEM, and proven experience securely migrating enterprise/clinical applications to AWS and/or Azure.

Responsibilities

• Serve as a technical lead for the Security Information and Event Management (SIEM) program and cloud security engineering.
• Design, build, and secure hybrid on-premises and cloud environments while ensuring comprehensive security visibility across the enterprise.

Requirements

• Bachelor's degree in a related field is preferred.
• 7+ years of progressive experience in cybersecurity engineering, with significant hands-on SIEM engineering/administration experience is required.
• Demonstrated experience onboarding applications, infrastructure, and cloud workloads to a SIEM (log source integration, parsing, use case creation)
• Experience securing and/or migrating applications to AWS and/or Azure
• Working familiarity with EDR platforms
• Working familiarity with network and security monitoring tools
• Solid understanding of security logging, detection engineering, and incident response fundamentals
• Experience working in regulated environments (healthcare, HIPAA, HITRUST, or similar strongly preferred)
• Experience in a healthcare or hospital system environment is preferred.
• Experience with identity/access management, network segmentation, or DLP tooling
• Familiarity with IoMT/OT security considerations in a clinical environment
• SIEM: Splunk (or equivalent - Sentinel, QRadar, LogRhythm)
• EDR: CrowdStrike or equivalent
• Cloud: AWS security services, Azure security services
• Network/Security Monitoring: Firewall/IDS/IPS platforms, network monitoring tools
• Other: Active Directory, familiarity with SSO/LDAP integrations a plus
• Relevant certification(s) are preferred: CISSP, CCSP, GCIA, GCED, AWS Security Specialty, or Azure Security Engineer Associate.

Skills

Required

• Network and security monitoring tools

Preferred

• Familiarity with SSO/LDAP integrations

Benefits

• In addition to your base compensation, VHC Health offers a comprehensive benefits package, including medical, dental, and vision coverage (subject to eligibility requirements), as well as additional wellness and retirement benefits designed to support our employees and their families.
• VHC Health is committed to wage transparency and equitable pay practices. The compensation offered for this position—whether expressed as an annual salary or hourly rate—is determined based on a variety of legitimate, non-discriminatory factors. These factors include, but are not limited to, a candidate’s qualifications, relevant training and experience, skill level, shift differentials (where applicable), internal equity, and current market conditions.
• The posted hiring range reflects the range VHC Health, in good faith, believes is appropriate for this role at the time of posting. This range may be adjusted in the future based on business needs or market changes. No portion of compensation is considered earned until it is vested and determined in accordance with the terms of applicable policies and benefit plans. The availability and amount of any bonuses, incentives, or other benefits are subject to the terms of those plans and may be modified at the sole discretion of VHC Health, in accordance with applicable law.