Note: The job is a remote job and is open to candidates in USA. Arkenstone Defense empowers defense technology startups with the tools, infrastructure, and compliance solutions needed to become successful prime contractors. The Staff Detection Security Operations Engineer will lead security architecture, detection engineering, infrastructure reliability, observability, automation, incident response, and threat monitoring across AWS, Azure, and GCP environments supporting federal and commercial customers.
Responsibilities
- Design and review security architectures, reference implementations, and control patterns for FedRAMP/CMMC-aligned environments
- Lead complex security assessments and technical deep-dives; identify root causes and drive sustainable remediation across the customer portfolio
- Guide the confi guration and evolution of core security tooling — including SIEM, EDR, vulnerability management, logging pipelines, and data ingestion architectures
- Develop advanced automation, reusable modules, and infrastructure-as-code patterns that engineering teams adopt across programs
- Lead cross-functional technical initiatives spanning security, IT, compliance, and product engineering teams
- Drive observability improvements across the security stack — metrics, alerting, and dashboards for operational health
- Evaluate emerging technologies and tooling; make build-vs-buy recommendations to MAC leadership
- Provide technical mentorship and code/design review for engineers; infl uence standards, runbooks, and best practices across the team
- Design, implement, and own the infrastructure reliability strategy across AWS, Azure, and GCP
- Champion observability by developing and maintaining effective logging, monitoring, and alerting systems
- Lead efforts in performance tuning, system hardening, capacity planning, and disaster recovery
- Automate deployment, scaling, and recovery workfl ows to reduce manual toil
- Act as a mentor and technical leader to junior engineers and cross-functional partners
- Perform any other related duties as required or assigned
- Own the incident management lifecycle: from detection to postmortem and root cause analysis
- Monitor SIEM and security tools for alerts; perform initial triage and escalate per documented playbooks; tune and create detection SIEM alerts
- Collect and correlate security data from multiple sources to distinguish true positives from noise
- Monitor and analyze threat intelligence sources to detect potential security threats and vulnerabilities; implement continuous monitoring systems to ensure real-time awareness of security events
- Participate in on-call rotation for after-hours security monitoring and incident response
- Maintain and improve runbooks, knowledge base articles, and repetitive task automations
- Work closely with internal engineering, development, and compliance teams to implement security measures and address compliance requirements
- Stay current on industry trends, emerging threats, and changes in compliance standards to ensure ongoing effectiveness
Skills
- • 5-8 years of experience in Security Engineering and/or Detection engineering roles
- • Hands-on exposure to AWS Athena
- • Profi ciency in detection engineering: alert creation and tuning - writing SQL, KQL, Sigma, or YARA rules for threat detection
- • Proven track record of operating large-scale systems in multi-cloud environments
- • Strong knowledge of cloud-native architecture, container orchestration (e.g., Kubernetes), and CI/CD pipelines
- • Profi cient in scripting (Python, Bash, etc.) and infrastructure automation tools
- • Experience with monitoring/observability platforms (e.g., Prometheus, Grafana, Datadog, etc.)
- • Excellent problem-solving skills and a bias toward ownership and action
- • Familiarity with SIEM platforms
- • Working knowledge of incident response processes, procedures, and documentation standards
- • Comfortable making decisions under pressure and leading through incidents
- • Working knowledge of FedRAMP or NIST 800-53 controls preferred
- • Comfortable participating in customer discussions
- • Clear communicator who can translate technical concepts to mixed audiences
- • Prolonged periods of sitting at a desk and working on a computer
- • Must be able to lift up to 15 pounds at times
- • May require occasional travel to office locations or client sites
- • Ability to communicate effectively in written and verbal form
- • Working knowledge of FedRAMP or NIST 800-53 controls preferred
Benefits
- Remote, US
- Medical, dental, and vision insurance options
- Mental health support and wellness initiatives
- Flexible 401(k) plan with matching company contributions
- Generous paid time off, sick leave, and holiday pay
- Employee Assistance Program with confidential resources for personal and professional support
- Access to training, certifications, and continuing education
Company Overview