Cyber Security Engineer

Sr Cybersecurity Engineer - Defense Search

OVERVIEW

Are you looking for a new career opportunity with an exciting Defense/Aerospace company?! Then we've got the right team for you! In this role, you're responsible for the duties listed below.

Immediate opening for a Sr Cybersecurity Engineer based in Glen Burnie, MD with remote options available who possesses:

• 3+ years of hands-on cybersecurity engineering experience
• Professional-level vendor certification such as PCNSE, CCNP Security, JNCIP-Sec, Splunk Architect, or equivalent
• Strong network and systems engineering experience
• Hands-on experience implementing, supporting, and improving cybersecurity solutions
• Experience with security platforms such as SIEM, EDR, NGFW, and SOAR
• Strong troubleshooting, technical ownership, and cross-functional communication skills

FULL DESCRIPTION: We are seeking a Sr Cybersecurity Engineer to take broad technical ownership across internal and customer-facing cybersecurity engineering initiatives. This permanent role will focus on sustaining and modernizing core security platforms, developing detection capabilities, improving security telemetry, reviewing network-security designs, supporting vulnerability management, automating production-server management, and serving as a technical cybersecurity resource for cross-functional teams. The ideal candidate will bring strong hands-on security engineering experience, deep network and systems knowledge, a professional-level vendor certification, and the ability to work independently while translating security requirements into practical, scalable solutions.

The selected candidate will be responsible for:

• Implementing, expanding, and modernizing core cybersecurity platforms
• Supporting and improving SIEM technologies
• Supporting and improving Endpoint Detection and Response platforms
• Supporting and improving Next-Generation Firewall technologies
• Supporting and improving Security Orchestration, Automation, and Response platforms
• Developing and refining SIEM detection logic
• Creating queries, rules, and detections for anomalous or malicious activity
• Supporting detection of insider risk and other meaningful security events
• Integrating security-relevant telemetry into observability and security platforms
• Improving security-data visibility, quality, and operational usefulness
• Evaluating emerging cybersecurity tools and technologies
• Designing and testing new security capabilities
• Supporting improvement of security-engineering maturity and scalability
• Reviewing network-security designs
• Providing engineering input on intrusion detection and prevention technologies
• Providing engineering input on firewall architectures
• Supporting content-filtering and related network-security controls
• Maintaining reliable security-data collection and flow
• Supporting security reporting for SOC and internal stakeholders
• Leading vulnerability-management review efforts with partner teams
• Helping identify, prioritize, and reduce security risk
• Serving as a cybersecurity technical resource for developers
• Supporting Systems Engineers and other technical teams with cybersecurity guidance
• Maintaining cybersecurity infrastructure in a secure and supportable state
• Ensuring cybersecurity systems remain current and aligned with vulnerability-management expectations
• Developing automated management capabilities for production server environments
• Improving operational consistency and security controls through automation
• Supporting internal cybersecurity platforms and customer-facing environments
• Providing technical ownership and independent problem-solving across assigned security initiatives
• Supporting secure design and implementation of critical services
• Working across IT, Infrastructure, Development, Operations, and Security teams
• Maintaining technical documentation and cybersecurity system information
• Supporting continuous improvement of cybersecurity processes and technologies
• Pursuing relevant technical certifications and professional development
• Developing a strong understanding of company platforms, services, and customer environments
• Applying cybersecurity practices in a way that supports both protection and business operations
• Performing other senior cybersecurity engineering duties as assigned

The selected candidate will also possess:

• 3+ years of equivalent cybersecurity engineering experience required
• Professional-level vendor certification required
• PCNSE certification preferred
• CCNP Security certification preferred
• JNCIP-Sec certification preferred
• Splunk Architect certification preferred
• Equivalent professional-level cybersecurity or networking certification may be considered
• Strong cybersecurity solution implementation experience required
• Strong network engineering skills required
• Strong systems engineering skills required
• Experience supporting multiple platforms and applications preferred
• System administration experience preferred
• Experience with SIEM technologies strongly preferred
• Experience with EDR technologies strongly preferred
• Experience with Next-Generation Firewalls strongly preferred
• Experience with SOAR technologies preferred
• Experience developing security detections and queries preferred
• Security telemetry and observability experience preferred
• Network-security design experience required
• Firewall and intrusion-detection/prevention knowledge required
• Vulnerability-management experience required
• Experience automating production-server administration preferred
• Knowledge of cybersecurity frameworks required
• Strong troubleshooting and analytical skills required
• Strong technical judgment required
• Ability to independently own security-engineering initiatives
• Ability to serve as a technical resource for cross-functional teams
• Strong written and verbal communication skills required
• Strong documentation skills required
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline preferred
• CISSP certification preferred
• Ability to work effectively across customer-facing and internal technical environments
• Ability to successfully complete required background and certification verification
• Ability to work standard business hours
• Ability to work onsite in Glen Burnie, MD or remotely based on business needs and approved work arrangement
• No employment sponsorship available

Physical Requirements:

• Ability to sit and work at a computer for extended periods while configuring security platforms, reviewing logs, developing detections, troubleshooting systems, and maintaining documentation
• Ability to visually review dashboards, logs, network diagrams, security alerts, vulnerability information, configuration data, and computer screens for extended periods
• Ability to use hands and fingers for computer work, keyboarding, technical documentation, and standard office tasks
• Ability to communicate by phone, email, video conference, and in person throughout the workday
• Ability to occasionally stand, walk, bend, reach, and move throughout office, data-center, or technical environments as needed
• Ability to work with network, server, cybersecurity, and related technical infrastructure while following applicable security and safety procedures
• Ability to maintain concentration, technical accuracy, confidentiality, and attention to detail while supporting multiple security systems and priorities

Salary Range: $130,000 to $150,000/year

More information can be found at www.defensesearchusa.com.