{"id":4089623,"url":"https://alion.io/job/sinclair-sr-security-engineer","title":"Sr. Security Engineer","company":{"id":4413705,"name":"Sinclair","domain":"sinclairinc.com","url":"https://alion.io/company/sinclair-4","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":80,"open_postings":53,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cockeysville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":111000,"max":147805,"currency":"USD","period":"year","gross":null,"usd_annual":147805},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":".NET","optional":true},{"name":"C#","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Falcon","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Splunk","optional":true},{"name":"Tines","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-11-11T16:20:32Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T19:52:00Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We are looking for an experienced, technically driven security professional to advance Sinclair’s Information Security program. You will serve as a Senior Information Security Engineer focused on Security Operations, incident response, and advanced detection engineering. You will independently investigate complex threats, engineer high-fidelity detections across endpoint, identity, network, and cloud environments, and strengthen incident response through security tooling, workflow orchestration, and automation. You will also help evaluate and apply AI-assisted capabilities where they improve investigation quality and response efficiency. You will partner with internal teams, business stakeholders, and external security providers to improve detection coverage, accelerate response, and reduce enterprise risk.\nResponsibilities:\nProcesses & Execution\nLead technical investigation, triage, containment, eradication, and recovery activities for complex security incidents across on-premises, cloud, identity, and endpoint environments.\n\nAnalyze security telemetry, authentication activity, process execution, network traffic, and threat intelligence to determine root cause, attack scope, impact, and appropriate response.\n\nPerform proactive threat hunting and retrospective investigations; identify gaps in telemetry, detections, and response capabilities.\n\nOwn high-severity incident investigations, document evidence-based findings, communicate business impact, and coordinate timely remediation with system owners and external partners.\n\nApply MITRE ATT&CK and other relevant threat-informed methodologies to improve investigation quality, detection coverage, and response effectiveness.\n\nDemonstrate independent technical judgment, clear communication, and accountability for outcomes in time-sensitive situations.\n\nEngineering, Collaboration & Partnerships\nDesign, develop, test, deploy, and continuously tune complex detection mechanisms for multi-stage attacks, identity compromise, lateral movement, persistence, exfiltration, and other advanced adversary behaviors.\n\nCorrelate endpoint, SIEM, identity, email, network, and cloud telemetry to create behavioral, contextual, and risk-based detections rather than relying solely on static indicators.\n\nDevelop and maintain detection-as-code content, queries, analytics, and validation tests; assess false positives, data quality, precision, and detection gaps.\n\nDesign, implement, and maintain automated SecOps and incident response workflows using security platforms, APIs, SOAR technologies, and enterprise ticketing systems to streamline enrichment, investigation, containment, and remediation.\n\nAdvance security operations automation by integrating AI-assisted analysis and agent-based capabilities, where appropriate, into existing investigation and response processes to improve context, prioritization, and analyst efficiency.\n\nApply established security engineering controls to automated response workflows, including least-privilege access, action validation, approval for high-impact remediation, logging, exception handling, and escalation to analysts.\n\nIntegrate third-party alert and investigation outputs with internal telemetry to support independent validation, deeper investigation, and consistent remediation.\n\nCollaborate with infrastructure, IAM, cloud, endpoint, IT operations, and external security partners to validate detections, remediate threats, and operationalize new capabilities.\n\nPerformance Improvement\nMeasure and improve detection coverage, fidelity, mean time to detect/respond, investigation quality, automation success, and analyst effort saved.\n\nContinuously test detections and response workflows using attack simulations, adversary emulation, incident lessons learned, and controlled validation.\n\nDocument engineering designs, investigation procedures, response decision criteria, automation safeguards, and operational runbooks.\n\nIdentify repetitive analyst tasks suitable for automation while preserving human oversight for uncertain, destructive, or business-disruptive actions.\n\nMentor engineers and analysts through technical reviews, investigation feedback, and knowledge sharing; promote sustainable engineering standards.\n\nEvaluate new security detection and response technologies, including AI-assisted capabilities, based on practical operational value, reliability, security, and measurable risk reduction.\n\nQualifications:\nBachelor’s degree in cybersecurity, computer science, information technology, or equivalent professional experience.\n\n5+ years of hands-on experience in security operations, incident response, threat detection, security engineering, or a closely related discipline, including ownership of complex investigations.\n\nDemonstrated experience building and tuning advanced detections in a SIEM, EDR/XDR, or cloud security analytics platform; ability to explain detection logic and validate underlying evidence.\n\nStrong understanding of attacker techniques, Windows and Linux internals, identity-based attacks, network protocols, cloud security, and incident response methodology.\n\nHands-on experience integrating security platforms through APIs, developing orchestration workflows, and implementing automated investigation or response actions using SOAR tools and enterprise IT service management platforms.\n\nFamiliarity with AI-assisted security investigation, agent-based automation, or LLM-enabled security workflows is a plus; specialized AI development or production AI-agent experience is not required.\n\n3+ years of hands-on experience with the Microsoft Defender security suite (such as Defender for Endpoint, Defender for Identity, Defender for Office 365, or Defender XDR) and related Microsoft security/identity technologies, including Entra ID.\n\n3+ years of hands-on experience with enterprise security technologies such as Zscaler, CrowdStrike Falcon, Abnormal Security, Tines, Armis, and Splunk, or equivalent platforms; strong experience across multiple tools is expected, but experience with every named product is not required.\n\nProven ability to investigate incidents and engineer or tune detections directly in EDR/XDR, SIEM, network security, email security, and identity platforms, including querying telemetry, investigating alerts, and operationalizing response actions.\n\nKnowledge of MITRE ATT&CK, NIST incident response guidance, and security engineering best practices.\n\nProfessional security certifications such as CISSP, GCIH, GCFA, GCDA, or equivalent preferred.\n\nExcellent written and verbal communication skills, cross-functional collaboration, and demonstrated ownership of technical initiatives.\n\nPlease note that this position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.\nThe base salary compensation range for this role is $111,000 to $147,805. Final compensation for this role will be determined by various factors such as a candidates’ relevant work experience, skills, certifications, and geographic location. Full time positions are eligible for benefits that include participation in a retirement plan, life and disability insurance, health, dental and vision plans, flexible spending accounts, sick leave, vacation time, personal time, parental leave and employee stock purchase plan.\nSinclair is proud to be an equal opportunity employer and a drug free workplace. Employment practices will not be influenced or affected by virtue of an applicant's or employee's race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, military or veteran status or any other characteristic protected by law.\nAbout Sinclair:\nSinclair, Inc. (Nasdaq: SBGI) is a diversified media company and a leading provider of local news and sports. The Company owns, operates and/or provides services to 177 television stations in 79 markets affiliated with all major broadcast networks; owns Tennis Channel, the premium destination for tennis enthusiasts; and multicast networks CHARGE, Comet, ROAR and The Nest. Sinclair’s AMP Media produces a growing portfolio of digital content and original podcasts. Additional information about Sinclair can be found at www.sbgi.net.\nAbout the Team\nThe life-blood of our organization is our people. We have a compelling story, a goal-oriented culture, and we take really good care of people. How good? Here is a glimpse: great benefits, open-door policy, upward mobility and a strong desire to see you succeed. Ready to be part of a winning team? Let’s talk.","description_format":"text","description_chars":8598,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Parental leave","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Broadcasting","Digital Media"],"lifecycle":[{"event":"open","at":"2026-11-11T19:52:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":16,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-11T20:41:36Z"},"pay":{"stated_usd_annual":147805,"is_top_pay":false},"html_url":"https://alion.io/job/sinclair-sr-security-engineer","json_url":"https://alion.io/job/sinclair-sr-security-engineer.json","meta":{"generated_at":"2026-11-11T20:41:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":40383,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4413705},"rest":"https://alion.io/mcp/rest/get_company?id=4413705"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsinclair-sr-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsinclair-sr-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsinclair-sr-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sinclair-sr-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsinclair-sr-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4089623}},{"tool":"search_jobs","arguments":{"company":"sinclairinc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4089623},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}