What are the responsibilities and job description for the Cyber Operations Engineer position at FANTOM CORPORATION?
Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth.
We are seeking a Senior Cybersecurity Operations Engineer to lead the design, implementation, and continuous enhancement of cybersecurity operations within a hybrid IT environment. This role focuses on protecting enterprise systems through advanced threat detection, incident response, and security engineering practices aligned with federal cybersecurity standards.
The ideal candidate has strong experience in cloud security, security operations tools, and incident response, with a proactive approach to identifying and mitigating threats.
Responsibilities
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
We are seeking a Senior Cybersecurity Operations Engineer to lead the design, implementation, and continuous enhancement of cybersecurity operations within a hybrid IT environment. This role focuses on protecting enterprise systems through advanced threat detection, incident response, and security engineering practices aligned with federal cybersecurity standards.
The ideal candidate has strong experience in cloud security, security operations tools, and incident response, with a proactive approach to identifying and mitigating threats.
Responsibilities
- Perform continuous monitoring and security operations across on-premise and cloud environments, including Azure and Microsoft 365
- Configure, manage, and optimize cybersecurity tools such as SIEM, SOAR, EDR, and NDR platforms
- Conduct proactive threat hunting and analyze security events to identify vulnerabilities and emerging risks
- Lead incident response efforts, including detection, containment, eradication, and recovery activities
- Develop and implement automation and orchestration solutions to enhance security operations efficiency
- Ensure compliance with federal cybersecurity frameworks and standards such as NIST, FISMA, and CISA directives
- Create and maintain security dashboards, metrics, and reports to support risk-based decision making
- Collaborate with system owners, engineers, and IT teams to integrate security into systems and applications
- Develop and maintain security documentation, procedures, and standard operating guidelines
- Must have an active Public Trust security Clearance
- Must be willing and able to work fully onsite at the location listed in this posting
- 6 years of experience in cybersecurity operations or security engineering
- Strong experience securing Microsoft Azure environments and the Microsoft 365 Defender suite
- Hands-on experience with SIEM tools such as Splunk or Microsoft Sentinel
- Experience with EDR and NDR platforms for endpoint and network protection
- Knowledge of federal cybersecurity frameworks including NIST, FISMA, and RMF
- Experience with incident response, threat analysis, and vulnerability management
- Strong scripting skills, preferably with PowerShell
- CISSP (Certified Information Systems Security Professional)
- GCIA (GIAC Certified Intrusion Analyst)
- GCIH (GIAC Certified Incident Handler) or equivalent
- #CJ
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.