{"id":134475,"url":"https://alion.io/job/csc-senior-cyber-security-engineer","title":"Senior Cyber Security Engineer","company":{"id":20296,"name":"CSC","domain":"cscglobal.com","url":"https://alion.io/company/csc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":90,"open_postings":37,"ghost_share":0,"stale_share":0.378,"repost_share":0.054,"time_to_fill_p50_days":59,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Wilmington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":96000,"max_usd":187000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1245},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Cortex XDR","optional":true},{"name":"Crowdstrike","optional":true},{"name":"GCP","optional":true},{"name":"IAM","optional":true}],"status":"live","first_seen_at":"2026-04-24T00:00:00Z","employer_posted_date":"2026-04-24","last_verified_at":"2026-10-17T19:23:12Z","board_verified":true,"closed_at":null,"days_open":176,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":176},"description":"Senior Cyber Security Engineer\nWilmington, DE\nMonday - Friday 8:00 - 5:00 ET\nHybrid/Remote\nWe are seeking a Senior Cyber Security Engineer to play a pivotal role in advancing our detection, response, and automation capabilities across a modern enterprise security stack. In this role, you will serve as a hands-on technical leader responsible for designing, engineering, and optimizing Cortex XSIAM to deliver high-fidelity detections, scalable automation, and rapid incident response. You will work with rich telemetry spanning endpoint, network, cloud, and identity data to turn adversary behavior into actionable analytics that measurably reduce risk.\nThis position is ideal for an experienced detection or security operations engineer who thrives at the intersection of platform engineering and threat expertise. You will collaborate closely with SOC analysts, incident responders, and fellow engineers, influence detection strategy, and mentor others while working on creative solutions that matter at enterprise scale. You’ll have the opportunity to shape how security operations evolves, driving improvements in signal quality, automation maturity, and mean time to respond, while continuously expanding your technical depth in XSIAM, XQL, and advanced security analytics.\nSome of the things you’ll be doing:\nPlatform Engineering: Design, deploy, and maintain Cortex XSIAM detections, correlations, and analytics across endpoint, network, cloud, and identity data sources. Build and tune detection logic to reduce noise while improving true positive rates. Perform ongoing platform optimization, including ingest management, rule tuning, and performance improvements.\nDetection Engineering & Threat Hunting: Develop and maintain custom detections using XQL (Cortex Query Language). Conduct proactive threat hunting and investigations using XSIAM analytics and telemetry. Translate threat intelligence and adversary techniques into actionable detections aligned to MITRE ATT&CK.\nAutomation & Response: Design and maintain automated response playbooks to accelerate incident containment and remediation. Integrate XSIAM with enterprise tooling (e.g., identity, EDR, ticketing, cloud, network security platforms). Support continuous improvement of MTTR through automation and orchestration.\nOperations & Collaboration: Partner with SOC analysts, incident responders, and engineering teams on investigations and response activities. Support post-go-live enhancements, backlog grooming, and technical debt reduction initiatives. Provide technical guidance and mentorship to engineers and analysts.\nWhat technical skills, experience and qualifications do you need?\nMinimum 5+ years of experience in Security Operations, Detection Engineering, or SIEM/SOAR engineering\nHands-on experience with Palo Alto Networks Cortex XSIAM (or strong XDR/XSOAR experience with rapid XSIAM ramp-up)\nStrong working knowledge of SIEM/XDR concepts and log analytics, incident response and threat detection workflows, and automation and orchestration use cases\nProficiency with XQL, KQL, SPL, or similar security query languages\nExperience integrating data from endpoint, network, cloud, and identity platforms\nStrong scripting experience (Python preferred)\nExperience operating security platforms at enterprise scale\nPreferred experience with endpoint security (Cortex XDR, Defender, CrowdStrike, etc.), cloud security telemetry (AWS, Azure, GCP), identity and access logs (AD, Azure AD, IAM)\nFamiliarity with MITRE ATT&CK and threat intelligence frameworks\nExperience supporting a 24/7 SOC or global security operations team\nBachelor’s degree in computer science, information assurance, MIS or equivalent industry experience.\nPalo Alto Networks Certified XSIAM Engineer or Analyst certification preferred.\nAdditional industry certifications are a plus (i.e., CEH, CISM, etc.)\n#CSC #CSCCareers #LI-HL1","description_format":"text","description_chars":3883,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Domain Registrars & Registries","Custody & Fund Administration","Brand Protection & Anti-Counterfeiting"],"lifecycle":[{"event":"open","at":"2026-04-24T00:00:00Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.508,"p_room":0.28,"age_days":176,"expected_fill_days":59,"reasons":["conf:2","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/csc-senior-cyber-security-engineer","json_url":"https://alion.io/job/csc-senior-cyber-security-engineer.json","meta":{"generated_at":"2026-10-17T19:37:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3000,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20296},"rest":"https://alion.io/mcp/rest/get_company?id=20296"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcsc-senior-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcsc-senior-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcsc-senior-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/csc-senior-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcsc-senior-cyber-security-engineer"}]}