Cyber Operations Engineer

Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth.

We are seeking a Senior Cybersecurity Operations Engineer to lead the design, implementation, and continuous enhancement of cybersecurity operations within a hybrid IT environment. This role focuses on protecting enterprise systems through advanced threat detection, incident response, and security engineering practices aligned with federal cybersecurity standards.

The ideal candidate has strong experience in cloud security, security operations tools, and incident response, with a proactive approach to identifying and mitigating threats.

• Perform continuous monitoring and security operations across on-premise and cloud environments, including Azure and Microsoft 365
• Configure, manage, and optimize cybersecurity tools such as SIEM, SOAR, EDR, and NDR platforms
• Conduct proactive threat hunting and analyze security events to identify vulnerabilities and emerging risks
• Lead incident response efforts, including detection, containment, eradication, and recovery activities
• Develop and implement automation and orchestration solutions to enhance security operations efficiency
• Ensure compliance with federal cybersecurity frameworks and standards such as NIST, FISMA, and CISA directives
• Create and maintain security dashboards, metrics, and reports to support risk-based decision making
• Collaborate with system owners, engineers, and IT teams to integrate security into systems and applications
• Develop and maintain security documentation, procedures, and standard operating guidelines

• Must have an active Public Trust security Clearance
• Must be willing and able to work fully onsite at the location listed in this posting
• 6 years of experience in cybersecurity operations or security engineering
• Strong experience securing Microsoft Azure environments and the Microsoft 365 Defender suite
• Hands-on experience with SIEM tools such as Splunk or Microsoft Sentinel
• Experience with EDR and NDR platforms for endpoint and network protection
• Knowledge of federal cybersecurity frameworks including NIST, FISMA, and RMF
• Experience with incident response, threat analysis, and vulnerability management
• Strong scripting skills, preferably with PowerShell

• CISSP (Certified Information Systems Security Professional)
• GCIA (GIAC Certified Intrusion Analyst)
• GCIH (GIAC Certified Incident Handler) or equivalent
• #CJ

Fantom Corp is a Software Development, Agile Cloud, Cyber Security (Risk Management, Assessments & Authorization (A&A)), Data, AI Platform (Computer Vision Models), Podcasting Media Services, and IT Services provider. Established in 2015, Fantom Corp serves Federal customers with top-notch Cybersecurity Architects, Data Scientists/Analysts, Software Engineers/Developers, DevSecOps Engineers, Project Managers, Identity, Credential Access Management (ICAM) services , and Cloud-certified practitioners. We excel in delivering emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML) with a focus on identifying trends, object detection, and classification of structured and unstructured data. Fantom Corp possesses mastery in all aspects of digital audio production. We lead in the ideation and creation of efforts for clients who want to harness the power of podcasting. We guide them in selecting the right show format for their needs and goals. As a Small Business, we possess the innovation, speed and flexibility to meet your requirements.