Security Engineer

KEY RESPONSIBILITIES AND DUTIES:

• Deploy, configure, maintain, and operate enterprise security platforms and technologies.

• Configure, tune, and optimize security controls to improve detection, prevention, and monitoring capabilities.

• Implement integrations and automation workflows across SIEM, SOAR, EDR/XDR, IAM, vulnerability management, and other security platforms.

• Develop and maintain security monitoring, detection rules, alerts, dashboards, and use cases.

• Support incident response investigations by analyzing security alerts, logs, endpoint telemetry, and other security data.

• Implement and manage cloud security controls across AWS and Azure environments.

• Perform security testing, control validation, configuration assessments, and technical security reviews.

• Support vulnerability management activities including vulnerability identification, prioritization, remediation tracking, and validation.

• Troubleshoot security platform issues, integrations, alerts, and operational security controls.

• Develop PowerShell and/or Python automation scripts to streamline security operations and reduce manual effort.

• Collaborate with SOC, incident response, infrastructure, cloud, DevOps, and application teams to implement and maintain security solutions.

• Continuously improve security operations through automation, tuning, integration, and optimization of enterprise security technologies.

MUST HAVE SPECIFIC KNOWLEDGE AND SKILLS:

• 3–8 years of experience in cybersecurity, security operations, infrastructure security, or related engineering roles.

• Hands-on experience implementing, configuring, and operating enterprise security technologies.

• Strong experience with SIEM platforms such as CrowdStrike Next-Gen SIEM, Microsoft Sentinel, Splunk, or IBM QRadar.

• Experience with SOAR platforms and security automation/orchestration workflows.

• Hands-on experience with EDR/XDR solutions and endpoint security technologies.

• Strong knowledge of AWS and Azure security services and cloud security controls.

• Experience developing detection rules, correlation rules, alerts, dashboards, and security monitoring use cases.

• Strong PowerShell and/or Python scripting skills for security automation and integrations.

• Experience with Identity and Access Management (IAM) technologies and security controls.

• Experience with vulnerability management tools, vulnerability assessment, remediation, and validation.

• Strong understanding of security logging, monitoring, incident detection, investigation, and response processes.

ADDITIONAL SKILLS AND OTHER REQUIREMENTS:

• Strong troubleshooting and root-cause analysis skills across security platforms and integrations.

• Experience integrating SIEM, SOAR, EDR/XDR, IAM, cloud, and vulnerability management tools.

• Ability to automate repetitive security operations and reduce manual processes.

• Experience supporting security incident investigations and providing technical evidence for response activities.

• Strong understanding of security operations, threat detection, monitoring, and security control validation.

• Ability to work effectively with SOC, infrastructure, cloud, DevOps, and application engineering teams.

• Strong documentation and communication skills.

• Demonstrated ability to improve operational security through automation, platform tuning, and continuous optimization.