Cybersecurity Engineer

Korra Technology Group is seeking a hands-on Cybersecurity Engineer based in San Diego, CA to help protect systems, networks, and sensitive information. The role focuses on security engineering, monitoring, vulnerability management, incident response, and ongoing improvements in risk reduction through collaboration across IT, infrastructure, and development teams.

Key Responsibilities

• Implement and maintain security controls across networks, endpoints, servers, cloud environments, and business applications.
• Monitor SIEM alerts and system logs to detect suspicious activity, potential intrusions, and unusual access patterns.
• Investigate security incidents by assessing scope, preserving evidence, coordinating containment and remediation, supporting recovery activities, and performing root-cause analysis.
• Conduct vulnerability assessments, prioritize findings based on risk, and work with system owners to remediate weaknesses.
• Configure and maintain firewalls, IDS/IPS, endpoint protection, email security, and other defensive technologies.
• Review access permissions, authentication methods, SSO, and privileged accounts to enforce least-privilege access.
• Review cloud platforms, including permissions, configurations, network rules, logging, and encryption, and support security testing and remediation.
• Partner with development teams on application security, secure coding practices, dependency management, and security checks in CI/CD pipelines.
• Support audits and compliance activities, and maintain incident playbooks, procedures, and reporting on vulnerabilities and remediation progress.
• Contribute to security awareness efforts, including guidance on phishing, credential protection, and safe data handling.

Required Qualifications

• Professional experience in cybersecurity, information security, security operations, or a related IT security role.
• Understanding of network security, operating systems, access controls, authentication, and common attack methods.
• Experience with security monitoring, log analysis, vulnerability assessment, or incident investigation.
• Familiarity with security tools such as SIEM platforms (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike), firewalls, and vulnerability scanners (e.g., Nessus, Qualys, Tenable).
• Knowledge of least privilege, defense in depth, encryption, and secure configuration.
• Ability to interpret security findings and communicate risks and remediation steps to both technical and non-technical teams.

Technologies

• SIEM platforms: Splunk, Sentinel
• EDR: CrowdStrike
• Firewalls, IDS/IPS
• Vulnerability scanners: Nessus, Qualys, Tenable
• SSO, CI/CD pipelines
• Scripting: Python, PowerShell, Bash
• Cloud: AWS, Microsoft Azure, Google Cloud

Preferred Qualifications

• Cloud security experience on AWS, Microsoft Azure, or Google Cloud.
• Scripting experience in Python, PowerShell, or Bash to automate security tasks.
• Knowledge of NIST, CIS Controls, ISO 27001, SOC 2, or HIPAA.
• Certifications such as CompTIA Security+, CySA+, CISSP, CEH, or a cloud security certification.
• Experience with incident response exercises, penetration test remediation, threat modeling, or security audits.
• A bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field, or equivalent practical experience.

Benefits

• Health, dental, and vision insurance
• 401(k) with company match
• Paid time off
• Paid holidays
• Health savings account
• Life insurance
• Parental leave
• Professional development assistance
• Referral program
• Vision insurance
• Dental insurance

Position Details

• Location: San Diego, CA (onsite)
• Employment type: Full-time
• Schedule: Monday to Friday, standard business hours
• Compensation: USD 115,000 per year