Senior Cybersecurity Operations Engineer

Key Responsibilities

• Lead day-to-day cybersecurity operations, including monitoring, detection, analysis, and response to security events
• Serve as a senior escalation point for incident response, performing root cause analysis and remediation
• Design, implement, and optimize SIEM use cases, detection rules, and automated response workflows
• Enhance threat detection capabilities leveraging EDR, NDR, and cloud-native security tools
• Drive security automation initiatives to improve response times and operational efficiency
• Support continuous monitoring and compliance efforts aligned with NIST and FISMA frameworks
• Collaborate with cross-functional teams to secure hybrid environments (on-premises + Azure cloud)
• Conduct threat hunting activities and proactively identify vulnerabilities or anomalous behavior
• Develop and maintain cybersecurity documentation, playbooks, and standard operating procedures
• Provide mentorship and technical guidance to junior cybersecurity staff
• A bachelor’s degree in cyber security, computer science or a closely related field is preferred, A high school diploma or equivalent is required.
• Six plus (6+) years of experience in cybersecurity operations, incident response, or security engineering in a federal setting is required
• Proven hands-on experience with: SIEM platforms (e.g., Splunk, Microsoft Sentinel) Endpoint Detection & Response (EDR) and Network Detection & Response (NDR) tools Microsoft Azure security services, including Defender for Cloud Cisco security technologies
• SIEM platforms (e.g., Splunk, Microsoft Sentinel)
• Endpoint Detection & Response (EDR) and Network Detection & Response (NDR) tools
• Microsoft Azure security services, including Defender for Cloud
• Cisco security technologies
• Strong experience operating within hybrid environments (cloud and on-premises)
• In-depth knowledge of federal cybersecurity standards and frameworks, including NIST and FISMA
• Demonstrated ability to lead cyber operations and respond to advanced threats
• Experience with scripting or automation (e.g., Python, PowerShell) preferred
• Excellent analytical, problem-solving, and communication skills
• An active Public Trust or had one in a recent position
• Requires US Citizenship

Preferred Qualifications

• CISSP (Certified Information Systems Security Professional)
• Microsoft Azure Security certifications (e.g., AZ-500 or equivalent)

Work Environment & Schedule

• Full-time, on-site role based in Washington DC.
• Travel may be required based on project and stakeholder needs.

Why OMG Federal

Equal Employment Opportunity (EEO) Statement