Sr. Security Engineer

Full‑time direct‑hire position; active Top Secret/SCI clearance required. No visa sponsorship, 1099 status, or C2C arrangements are available.

World Wide Technology (WWT) is a global technology solutions provider leading the AI and Digital Revolution. With over 12,000 employees and more than 60 locations worldwide, WWT delivers cutting‑edge technology solutions, operates an Advanced Technology Center, and is recognized as a Great Place to Work.

Location

San Antonio, TX – fully on‑site at Lackland AFB (JBSA).

Responsibilities

• Support deployment, configuration, API integration, and sustainment of cloud‑based cyber platform components.
• Maintain and troubleshoot Linux‑based applications across various distributions.
• Maintain and troubleshoot services hosted as containers or virtual machines.
• Maintain and troubleshoot network forensics technologies such as Zeek and Suricata.
• Develop and maintain automation using Python scripts to support platform operations and security analytics.
• Integrate threat‑intelligence data sources and detection workflows aligned with the MITRE ATT&CK framework.
• Assist with automated attack kill‑chain analysis and security event correlation.
• Support cybersecurity operations teams with platform API integration (cloud), troubleshooting, performance monitoring, and system maintenance.

Required Qualifications

• Top Secret clearance with SCI eligibility.
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field.
• 4+ years supporting cybersecurity platforms, cyber‑operations environments, or enterprise IT systems.
• Experience with network detection and response (NDR) and intrusion detection systems (IDS) such as Zeek, Suricata, or equivalent.
• Experience using the Elastic Stack (Elasticsearch, Logstash, Kibana), MDE, Trellix, or Tanium to ingest, correlate, and analyze large‑scale security telemetry; developing queries and dashboards.
• Experience performing threat hunting in AWS environments using CloudTrail, VPC Flow Logs, and familiarity with HashiCorp Boundary for secure, identity‑aware access.
• Experience with Docker, Podman, or Kubernetes for application deployments.
• Experience with Type 1 hypervisors, virtual machines, EC2 instances, and Linux administration.
• Experience supporting security products or security‑operations workflows.
• Minimum 4 years’ experience in DoD incident response and threat hunting.
• Familiarity with the Pyramid of Pain and the MITRE ATT&CK framework.
• DoD 8570 IAT Level II certification (e.g., Security+ or equivalent).
• AWS API integration experience.

Preferred Qualifications

• Experience conducting threat hunting within enterprise or mission‑hosted network environments, analyzing network traffic, authentication activity, endpoint telemetry, and application logs.
• Experience configuring network infrastructure to enable packet‑capture solutions.
• Familiarity with the Cisco 3‑Layer Hierarchical Model, Purdue Model, and other architectural frameworks (strongly preferred).
• GIAC Certified Forensic Analyst (GCFA) certification.
• AWS Cloud Certification.

Pay

Base pay range: $125,000 – $160,000 annually (varies by location, experience, skill set, performance, licensure, certification, and business needs). Variable incentive compensation such as bonuses or commissions may also be available.

Benefits

• Health, dental, and vision care; onsite health centers; employee assistance program; wellness program.
• Competitive pay, profit sharing, 401(k) with company match, life and disability insurance, tuition reimbursement.
• PTO and sick leave (starting at 20 days per year), 10 holidays, parental leave, military leave, bereavement.
• Nursing mothers benefits, voluntary legal, pet insurance, employee discount program.