Cyber Security Engineer

Cyber Security Engineer

Location: San Diego, CA | 100% On-Site

Employment Type: Contract

Contract Length: Approximately 3 months

Schedule: 40 hours per week

Industry: Financial Services / Banking

Compensation: $60-80/hr

Position Overview

LHH Recruitment Solutions is seeking an experienced Cyber Security Engineer for a contract opportunity with a financial services organization in San Diego, CA. This position will provide hands-on security engineering support across the organization's security monitoring, logging, firewall, and security-control environment.

The immediate focus of this engagement is Splunk Cloud and security logging . The Cyber Security Engineer will review and document the existing Splunk Cloud environment, troubleshoot logging issues, coordinate with internal teams and third-party vendors to ensure security logs are properly delivered to the SIEM, and support the continued integration of security tools and controls.

The ideal candidate has strong hands-on experience with Splunk Cloud and Fortinet firewalls , along with a solid understanding of the CIS Controls framework . This person should be comfortable independently investigating technical issues, documenting environments and processes, coordinating with vendors, and communicating findings to technical and security leadership.

This is a 100% on-site position in San Diego and is best suited for an organized, collaborative security professional who can quickly step into an established environment and make an immediate contribution.

Top Priorities

The three most important areas for this assignment are:

1. Splunk Cloud
2. Review the existing Splunk Cloud environment, understand connected systems and log sources, improve documentation, and troubleshoot systems or applications that are not logging correctly.
3. SIEM & Security Logging Integrations
4. Work with internal teams and third-party vendors to verify that required security logs are successfully being transmitted to the SIEM and resolve gaps in log ingestion.
5. Fortinet & Security Tool Integration
6. Support continued integration and configuration of security tools and Fortinet firewalls . The emphasis is on security engineering and integration rather than full-time firewall administration.

Essential Duties & Responsibilities

• Support and enhance the organization's Splunk Cloud environment, including log source review, monitoring, troubleshooting, and documentation.
• Investigate systems, applications, and security devices that are not properly sending logs and determine the source of logging or integration failures.
• Coordinate with technology vendors and internal stakeholders to ensure appropriate logs and security events are transmitted to the SIEM.
• Maintain documentation covering log sources, integrations, systems, workflows, and security-monitoring processes.
• Support the integration and configuration of Fortinet firewall technologies and other security infrastructure.
• Design and assist with the implementation of firewalls, intrusion detection capabilities, and related security controls.
• Assess emerging security threats and vulnerabilities and evaluate technologies or processes that can strengthen the organization's security capabilities.
• Apply knowledge of the CIS Controls framework when evaluating and implementing security controls.
• Develop and implement security policies, standards, procedures, and technical controls supporting the confidentiality, integrity, and availability of information assets.
• Develop scripts or automation, when appropriate, to improve security monitoring and incident-handling processes.
• Serve as an escalation resource for complex or sensitive information security issues.
• Review infrastructure and application changes to help ensure established security controls remain effective.
• Assist with security architecture and design for applications, systems, and technology projects.
• Provide technical guidance for the administration and maintenance of security tools when required.
• Perform security risk assessments and document findings and recommendations for business owners and security leadership.
• Implement and integrate security controls and establish appropriate testing and measurement plans.
• Track security-control effectiveness and communicate testing results and findings to management.
• Support encryption key and digital certificate management.
• Participate in internal and external security assessments and audits, including responding to documentation and evidence requests.
• Participate in the evaluation and selection of security infrastructure and technology vendors.
• Lead or contribute to technical security projects while independently managing priorities and deliverables.
• Utilize Azure DevOps (ADO) to support project tracking and related project-management activities.
• Mentor or provide technical guidance to team members and other stakeholders involved in the information security program.
• Participate in an on-call rotation and provide after-hours assistance for security-related issues when necessary.
• Follow applicable AML/BSA, OFAC, information security, and financial-services compliance requirements.

Required Qualifications

• Professional experience in Cybersecurity Engineering, Security Engineering, Information Security Engineering , or a closely related technical security role.
• Hands-on Splunk Cloud experience is required.
• Experience working with SIEM platforms, security logs, log ingestion, and security-monitoring workflows.
• Demonstrated experience diagnosing and resolving logging, log forwarding, or SIEM integration issues .
• Hands-on Fortinet firewall experience is required.
• Working knowledge of the CIS Controls framework and its application within enterprise security environments.
• Experience integrating security tools and controls across enterprise infrastructure.
• Knowledge of firewall, intrusion detection, network security, and security-monitoring concepts.
• Experience working with third-party technology or security vendors to troubleshoot integrations and resolve technical issues.
• Ability to assess security risks, identify vulnerabilities or control gaps, and present actionable recommendations.
• Strong technical documentation skills.
• Strong troubleshooting and analytical capabilities.
• Ability to independently manage technical priorities while collaborating with other security and IT professionals.
• Strong written and verbal communication skills.
• Ability to work 100% on-site in San Diego, CA for the duration of the assignment.

Preferred Qualifications

• Previous cybersecurity experience within banking, credit unions, financial services, or another highly regulated environment .
• Experience supporting security audits, assessments, or regulatory evidence requests.
• Experience with security automation or scripting.
• Familiarity with encryption, digital certificates, and key-management processes.
• Experience with Azure DevOps (ADO) for project or work-item management.
• Experience collaborating with security architects, infrastructure teams, vendors, and executive security leadership.

Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate t

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers
• San Francisco Fair Chance Ordinance