Cyber Security Engineer

The Cyber Security Engineer is responsible for monitoring, administering, and continuously improving the organization's security monitoring and threat detection capabilities.

This position supports SIEM, EDR/XDR, incident response, threat detection, vulnerability management, and cybersecurity operations across enterprise and production environments.

As the cybersecurity program matures, this position will develop into a trusted technical resource capable of independently managing daily security operations and providing continuity for the organization’s cybersecurity function.

• Security Operations & Incident Response Monitor SIEM, EDR/XDR, and MDR platforms. Investigate alerts and suspicious activity. Lead and coordinate incident response activities. Conduct threat hunting and event analysis. Improve detection rules and alert tuning. Evaluate SIEM log coverage and onboarding. Participate in shared after-hours security monitoring and incident response coverage. Respond to and escalate security-related requests and incidents received from the IT Help Desk. Vulnerability Management Coordinate vulnerability identification and remediation. Validate remediation efforts. Support risk reduction initiatives. Security Engineering & Administration Support implementation of security tools and controls. Assist with cloud security initiatives. Develop procedures and documentation. Support compliance and audit activities. Additional Ability to perform all essential job functions with or without reasonable accommodation. Perform all other duties as assigned. Must have regular and punctual attendance.
• Monitor SIEM, EDR/XDR, and MDR platforms.
• Investigate alerts and suspicious activity.
• Lead and coordinate incident response activities.
• Conduct threat hunting and event analysis.
• Improve detection rules and alert tuning.
• Evaluate SIEM log coverage and onboarding.
• Participate in shared after-hours security monitoring and incident response coverage.
• Respond to and escalate security-related requests and incidents received from the IT Help Desk.
• Coordinate vulnerability identification and remediation.
• Validate remediation efforts.
• Support risk reduction initiatives.
• Support implementation of security tools and controls.
• Assist with cloud security initiatives.
• Develop procedures and documentation.
• Support compliance and audit activities.
• Ability to perform all essential job functions with or without reasonable accommodation.