Sr. Level CyberSecurity Engineer
Senior
Cyber Security
Cybersecurity Operations
Cybersecurity Tools
Email Security
Endpoint Security
Engineer
Firewall Security
Incident Management
Incident Response
Information Security
InfoSec
Log Management
Mssp
Security
Security Information And Event Management
Security Monitoring
Security Operations
Splunk
Splunk Siem
Job Description
Lead security operations as a Tier 3 escalation point, operating enterprise security tooling and driving vulnerability management and threat hunting.
- Tier 3 escalation for security incidents, investigations, and troubleshooting
- Operate, administer, and optimize security tools and platforms across the enterprise
- Firewall engineering: create, review, and troubleshoot Palo Alto Next-Gen Firewall rulesets
- EDR and email security: administer and monitor CrowdStrike EDR and Proofpoint Email Security
- SIEM operations: operate and fine-tune SIEM platforms, including alert use case creation and optimization
- Cloud security operations: secure cloud environments using Microsoft Cloud Security Tools (for example: Defender for Endpoint, Defender for Identity, Purview)
- Vulnerability Management: lead the program including scanning, prioritization, remediation coordination, and reporting
- Threat hunting and assessment: conduct threat hunting, vulnerability assessments, and risk analysis
- Partner management: collaborate with and delegate tasks to MSSPs, ensuring SLAs and quality standards are met
- Documentation: develop and maintain security documentation, runbooks, and incident response procedures
- Compliance and awareness: stay current with emerging threats, vulnerabilities, and regulatory requirements
Requirements
- 5+ years of hands-on experience in cybersecurity roles
- Proven experience interoperating with MSSPs, third-party security vendors, and/or clients
- Solid understanding of network security, endpoint protection, and cloud security principles
- Strong analytical and problem-solving skills
- Excellent communication and documentation abilities
- Strong experience with Palo Alto Networks firewalls (ruleset creation, troubleshooting)
- Strong experience with CrowdStrike Falcon
- Strong experience with Proofpoint Email Security
- Strong experience with Microsoft Security Suite (Defender, Sentinel, Purview, etc.)
- Strong experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic (ELK))
Technologies
- Palo Alto Next-Gen Firewall, Palo Alto Networks firewalls
- CrowdStrike EDR, CrowdStrike Falcon
- Proofpoint Email Security
- SIEM, Splunk, Microsoft Sentinel, IBM QRadar, Elastic (ELK)
- Microsoft Cloud Security Tools, Defender for Endpoint, Defender for Identity, Purview
- SIEM alert use case creation and optimization
- MSSPs
Preferred Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, or related field
- Completion of a recognized cybersecurity training program (e.g., SANS, NIST NICE Framework-aligned bootcamps)
- Industry certifications: CompTIA Security+, CySA+
- Industry certifications: Certified Ethical Hacker (CEH)
- Industry certifications: GIAC certifications (e.g., GSEC, GCIA, GCIH)
- Industry certifications: Microsoft SC-200, SC-300
- Industry certifications: CISSP or CISM (for more senior candidates)
- Familiarity with Threat intelligence platforms (TIPs)
- Familiarity with SOAR tools
- Familiarity with Zero Trust Architecture
- Familiarity with Cloud platforms (Azure, AWS, GCP)
- Location: Atlanta, GA (onsite)
- Salary: USD 73 per hour
- Minimum Experience: 5 years
- Job ID: J54313
- Duration: 10 Months + Extension
- Domain Exposure: Insurance
- Client: To Be Discussed Later
- Employment Type: W-2, 1099, C2C
- Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other
- Bill Rate: $73/hour (C2C)
Similar Jobs
