Cyber Security Engineer

Overview

The Cyber Security Engineer is responsible for monitoring, administering, and continuously improving the organization's security monitoring and threat detection capabilities. This position supports SIEM, EDR/XDR, incident response, threat detection, vulnerability management, and cybersecurity operations across enterprise and production environments. As the cybersecurity program matures, this position will develop into a trusted technical resource capable of independently managing daily security operations and providing continuity for the organization’s cybersecurity function.

Responsibilities

• Security Operations & Incident Response

• Monitor SIEM, EDR/XDR, and MDR platforms.

• Investigate alerts and suspicious activity.

• Lead and coordinate incident response activities.

• Conduct threat hunting and event analysis.

• Improve detection rules and alert tuning.

• Evaluate SIEM log coverage and onboarding.

• Participate in shared after-hours security monitoring and incident response coverage.

• Respond to and escalate security-related requests and incidents received from the IT Help Desk.

Vulnerability Management

• Coordinate vulnerability identification and remediation.

• Validate remediation efforts.

• Support risk reduction initiatives.

Security Engineering & Administration

• Support implementation of security tools and controls.

• Assist with cloud security initiatives.

• Develop procedures and documentation.

• Support compliance and audit activities.

Additional

• Ability to perform all essential job functions with or without reasonable accommodation.

• Perform all other duties as assigned.

• Must have regular and punctual attendance.

Qualifications

• Experience administering, monitoring, and investigating security events using SIEM platforms.

• Experience working with EDR/XDR technologies to detect, investigate, and respond to security threats.

• Knowledge of threat detection, incident response, and security monitoring practices.

• Understanding of network security fundamentals, endpoint security, and identity-based threats.

• Ability to analyze security alerts, identify root causes, and recommend remediation actions.

• Experience supporting Microsoft 365 and Azure security environments preferred.

• Understanding of operational technology (OT) and manufacturing environments preferred.

Demonstrated Competencies

• Ability to work independently with minimal supervision.

• Strong analytical, troubleshooting, and problem-solving skills.

• Ability to solve and communicate complex problems, and document findings clearly in writing.

• Sound judgment on when to act versus escalate.

• Solutions-oriented, results-driven self-starter.

• Strong organizational ability.

• Ability to prioritize competing demands and manage multiple projects simultaneously.

Physical Requirements

• Office Setting

Experience: Minimum of three (3) years of cybersecurity, systems administration, network administration, infrastructure support, or a closely related IT discipline with demonstrated security responsibilities.

Education: Associate's degree or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field preferred. CompTIA Security+ certification or equivalent foundational cybersecurity certification. Equivalent combination of education, certifications, and relevant experience will be considered.