Cyber Security Engineer

The Cyber Security Engineer is responsible for monitoring administering and continuously improving the organizations security monitoring and threat detection capabilities. This position supports SIEM EDR/XDR incident response threat detection vulnerability management and cybersecurity operations across enterprise and production environments. As the cybersecurity program matures this position will develop into a trusted technical resource capable of independently managing daily security operations and providing continuity for the organizations cybersecurity function.

Security Operations & Incident Response

• Monitor SIEM EDR/XDR and MDR platforms.
• Investigate alerts and suspicious activity.
• Lead and coordinate incident response activities.
• Conduct threat hunting and event analysis.
• Improve detection rules and alert tuning.
• Evaluate SIEM log coverage and onboarding.
• Participate in shared after-hours security monitoring and incident response coverage.
• Respond to and escalate security-related requests and incidents received from the IT Help Desk.

Vulnerability Management

• Coordinate vulnerability identification and remediation.
• Validate remediation efforts.
• Support risk reduction initiatives.

Security Engineering & Administration

• Support implementation of security tools and controls.
• Assist with cloud security initiatives.
• Develop procedures and documentation.
• Support compliance and audit activities.

Additional

• Ability to perform all essential job functions with or without reasonable accommodation.
• Perform all other duties as assigned.
• Must have regular and punctual attendance.

Skills and Abilities

• Experience administering monitoring and investigating security events using SIEM platforms.
• Experience working with EDR/XDR technologies to detect investigate and respond to security threats.
• Knowledge of threat detection incident response and security monitoring practices.
• Understanding of network security fundamentals endpoint security and identity-based threats.
• Ability to analyze security alerts identify root causes and recommend remediation actions.
• Experience supporting Microsoft 365 and Azure security environments preferred.
• Understanding of operational technology (OT) and manufacturing environments preferred.

Demonstrated Competencies

• Ability to work independently with minimal supervision.
• Strong analytical troubleshooting and problem-solving skills.
• Ability to solve and communicate complex problems and document findings clearly in writing.
• Sound judgment on when to act versus escalate.
• Solutions-oriented results-driven self-starter.
• Strong organizational ability.
• Ability to prioritize competing demands and manage multiple projects simultaneously.

Physical Requirements

• Office setting.

Experience:Minimum of three (3) years of cybersecurity systems administration network administration infrastructure support or a closely related IT discipline with demonstrated security responsibilities.
Education:Associates degree or Bachelors degree in Cybersecurity Information Technology Computer Science Information Systems or a related field preferred. CompTIA Security certification or equivalent foundational cybersecurity certification. Equivalent combination of education certifications and relevant experience will be considered.