Cyber Security Engineer

Key Responsibilities:

• Act as a Tier 3 escalation point for security incidents and investigations.
• Manage and optimize security tools and platforms across the enterprise.
• Create, review, and troubleshoot Palo Alto Next-Gen Firewall rulesets.
• Administer and monitor CrowdStrike EDR and Proofpoint Email Security solutions.
• Operate and fine-tune SIEM platforms, including alert use case creation and optimization.
• Leverage Microsoft Cloud Security Tools (Defender for Endpoint, Defender for Identity, Purview, etc.) to secure cloud environments.
• Lead the Vulnerability Management program, including scanning, prioritization, remediation coordination, and reporting.
• Collaborate with and delegate tasks to MSSPs, ensuring SLAs and quality standards are met.
• Conduct threat hunting, vulnerability assessments, and risk analysis.
• Develop and maintain security documentation, runbooks, and incident response procedures.
• Stay current with emerging threats, vulnerabilities, and regulatory requirements.

Required Qualifications:

• 5+ years of hands-on experience in cybersecurity roles.
• Strong experience with:

• Palo Alto Networks firewalls (ruleset creation, troubleshooting)
• CrowdStrike Falcon
• Proofpoint Email Security
• Microsoft Security Suite (Defender, Sentinel, Purview, etc.)
• SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic (ELK))

• Proven experience interoperating with MSSPs, third-party security vendors, and or clients.
• Solid understanding of network security, endpoint protection, and cloud security principles.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation abilities.

Preferred Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, or related field.
• Completion of a recognized cybersecurity training program (e.g., SANS, NIST NICE Framework-aligned bootcamps).
• Industry certifications such as:

• CompTIA Security+, CySA+
• Certified Ethical Hacker (CEH)
• GIAC certifications (e.g., GSEC, GCIA, GCIH)
• Microsoft SC-200, SC-300
• CISSP or CISM (for more senior candidates)

• Familiarity with:

• Threat intelligence platforms (TIPs)
• SOAR tools
• Zero Trust Architecture
• Cloud platforms (Azure, AWS, Google Cloud Platform)