Cybersecurity Engineer 3

Job Title

Pay Range: $70hr - $75hr

Requirement/Must Have

• Minimum of 8+ years of hands-on experience in cybersecurity, specifically operating, building, and investigating threats within a SIEM or Client.
• Excellent critical thinking, problem-solving, and communication skills.
• Ability to operate calmly under pressure and manage multiple security tickets.
• Proficiency in writing SPL (Client Processing Language).
• Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP).
• Knowledge of security frameworks (e.g., MITRE ATT&CK) and security compliance standards (e.g., NIST, HIPAA, or SOC 2).
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Responsibilities

• Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and potential security incidents.
• Create, maintain, and tune Client correlation searches, alerts, and dashboards to minimize false positives and improve detection capabilities.
• Investigate potential security incidents, follow forensic evidence, and collaborate with IT and network teams to remediate threats.
• Develop and refine detection and response playbooks based on threat intelligence and frameworks like MITRE ATT&CK.
• Work with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.
• Support audit readiness by collecting SIEM control evidence and generating compliance reports aligned with internal policies and standards.

Nice to Have

• Relevant certifications such as Client Core Certified User, Client Core Certified Advanced Power User, are highly preferred.