Cyber Security Engineer

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment!

This position will be based at Remote

We are seeking a Security Engineer to provide dedicated technical engineering and systems integration support for our deployed insider threat tools and homegrown User Behavior Analytics (UBA / UEBA) solution. In this role, you will bridge the gap between security data engineering and threat detection to safeguard core assets—including intellectual property, sensitive datasets, critical infrastructure, and physical facilities—against both deliberate malicious acts and unintentional internal risk exposure.

Rather than performing raw application development, you will focus on building robust backend logic, integrating disparate data sources, and engineering automated detection workflows across multiple operational environments—including sovereign delivery, cloud, and corporate infrastructures.

• Build & Tune Detections:
  Design, deploy, and continuously tune behavioral risk models, anomaly detection heuristics, and threat rules within our UBA platform.
• Multivariate Data Analysis & Anomaly Detection:
  Aggregate and correlate complex, high-volume, disparate data streams (e.g., identity lifecycle, physical badge logs, security clearance details, network telemetry, OSINT, endpoint activity, and SaaS logs) to detect anomalous user behavior and construct chronological user timelines.
• Reduce False Positives:
  Assess model performance, evaluate detection coverage against known threat matrices, and systematically minimize false-positive alert noise.

• Incorporate New Signals:
  Partner with Corporate Engineering and Infrastructure teams to securely ingest new high-value telemetry and risk signals into the analytics engine .
• Maintain Homegrown Platforms:
  Assist in the maintenance, optimization, and scaling of backend data pipelines, ensuring reliability and risk-scoring consistency.
• Automate Response Workflows:
  Build API-based integrations and automated workflows to connect detection engines with investigative case management platforms and incident response ticketing.

• Cross-Functional Incident Support:
  Work alongside Incident Response (CSIRT), Legal, HR, Privacy, and Corporate Security teams to reconstruct timelines and provide factual findings with clear confidence levels.
• Strict Privacy Adherence:
  Execute data integration and investigative actions strictly within authorized scope, ensuring adherence to strict internal auditing, privacy regulations, and confidentiality protocols.
• Technical Advisory & Tooling Integration:
  Serve as a technical advisor and subject matter expert for case management, insider threat software tooling setup, system administration, and engineering efforts.

• Experience:
  
  3+ years of experience in Security Engineering, Detection Engineering, Security Operations, or Insider Threat technical roles.
• Scripting & Automation:
  Strong proficiency in Python or Go for workflow automation, alongside solid SQL capabilities for data query and correlation.
• Data & Analytics Platforms:
  Hands‑on experience working with SIEM platforms…