Senior Cyber Security Engineer (Microsoft) ZT
Athenix Special Missions, LLC · MacDill Air Force Base, FL
—
Jul 13, 2026
MacDill Air Force Base, FL
Jul 21, 2026
What this job asks for AI summary
A senior-level cybersecurity engineering role embedded at USSOCOM (MacDill AFB), focused on implementing User and Entity Behavior Analytics (UEBA) and Security Orchestration, Automation and Response (SOAR) capabilities as part of a Zero Trust initiative. Day-to-day work spans Microsoft Sentinel, Defender, Purview, Entra, and Logic Apps, alongside RMF/ATO lifecycle management and Tier 3/4 engineering support. Suits a seasoned engineer with deep Microsoft security stack experience and an active TS/SCI clearance.
Senior level · 10+ years · Tampa-St. Petersburg-Clearwater, FL · TS/SCI clearance · Contract
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $121,586 (middle half $89,036–$154,361).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
This is a contingent, 12-month contract position (with possible extension) tied to government funding at MacDill AFB — not a permanent full-time hire.
Degree requirement: the JD accepts '4+ additional years of cybersecurity experience in lieu of a degree,' so no formal degree is hard-gated.
DoD 8570 IAT Level III / DoW 8140 (511) Advanced certification is required; CISSP is listed as the example and is the most common qualifying cert at that level — captured as the representative must-have cert.
Microsoft SC-100 and SC-200 certifications appear under Preferred Qualifications only.
Scripting/programming languages (Bash, Python, Java, Perl, .NET) are listed under Preferred Qualifications as a single interchangeable requirement — emitted as one preferred skill with alternatives.
Splunk familiarity is listed under Preferred Qualifications ('familiarity with developing and deploying operational and security use cases within Splunk').
Zero Trust experience (DoW & NSA Zero Trust Guidance, USSOCOM SOFNET) appears under Preferred Qualifications; the Zero Trust initiative itself is the program context, not a gated skill.
The alternative occupation code 15-1299 noted as a runner-up given the heavy SOAR/UEBA engineering and Zero Trust architecture scope, which blends analyst and engineer duties.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.