Principal Cyber Security Engineer

Salary: $86,216.04 - 95,784.76 per year Requirements:

• We prefer candidates with a strong record of managing high-impact breaches and operating enterprise security platforms in hybrid Windows and cloud environments.
• We prefer candidates with documented experience building custom security tools and integrating systems.
• We require deep knowledge of cybersecurity architecture, enterprise defense strategies, and unified threat management.
• We require expert-level experience with CrowdStrike Falcon, Real Time Response, sensor deployment, Windows kernel hardening, and Active Directory security.
• We require advanced expertise in securing Google Workspace and Google Cloud Platform, including IAM and Security Command Center, and connecting cloud environments with Active Directory.
• We require strong proficiency in Python and PowerShell for security automation and REST API integration, especially with Google Admin SDK and CrowdStrike APIs.
• We require advanced knowledge of memory forensics, malware analysis, and cloud telemetry hunting using the MITRE ATT&CK framework.
• We require working knowledge of applying CJIS, IRS Pub 1075, and NIST 800-53 controls across cloud and on-premises assets.
• We require the ability to translate complex technical risk into business language for executive leadership.
• We require a bachelors degree, typically in Computer Technology, plus 1-3 years of progressive work experience in a related field, or 4-7 years of progressive work experience as a substitution for education and experience.
• We require the ability to pass a comprehensive fingerprint-based background check for CJIS and IRS Pub 1075 access.
• We require availability for a 24/7 on-call rotation and immediate emergency response during state cyber incidents.

• We serve as the states lead security architect, shaping enterprise cybersecurity architecture and advising our CISO on emerging threats, strategic investments, and technical standards.
• We lead endpoint security and Zero Trust engineering, including CrowdStrike Falcon and conditional access designs that connect Google environments with Active Directory.
• We optimize telemetry collection and log ingestion across Windows servers, cloud workloads, and multi-cloud environments to maintain full visibility.
• We act as the final escalation point for the most complex security incidents, performing deep forensic analysis and malware investigation.
• We reconstruct attack timelines, identify persistence mechanisms, and direct technical containment and remediation during major security events.
• We automate security workflows using Python, PowerShell, and Bash, and we build custom API integrations to coordinate response actions across platforms.
• We design infrastructure security through IaC tools such as Terraform and Ansible to support compliance by default.
• We implement hardening baselines for cloud-native workloads and Windows systems based on current threat intelligence.
• We perform proactive threat modeling for new enterprise systems before deployment.
• We provide technical mentoring and guidance to CSOC analysts and junior engineers.

• API
• Active Directory
• Ansible
• Architect
• Bash
• Cloud
• IAM
• Support
• PowerShell
• Python
• REST
• Security
• Terraform
• Windows
• Ada
• AWS
• Azure
• LESS

More:

We are the Wyoming Department of Enterprise Technology Services, based in Cheyenne, Wyoming, offering a permanent full-time, flexible hybrid role with a salary range of $7,184.67 to $7,983.73 monthly. We provide a comprehensive total rewards package that includes medical, dental, and vision coverage, paid leave, retirement options, flexible schedules, professional development, wellness incentives, and additional voluntary benefits. We support meaningful public service work that strengthens Wyoming communities, and we offer the stability of state employment along with the benefits of living in a state known for its quality of life, outdoor recreation, and no state income tax.

last updated 33 week of 2026