Security Platform Engineer

Security Platform Engineer The Security Platform Engineer serves as the County's senior technical cybersecurity specialist and is responsible for the configuration, integration, optimization, and resilience of enterprise security platforms. The position leads security engineering efforts and provides advanced technical support during cybersecurity incidents. The Security Platform Engineer ensures that security controls operate effectively, produce actionable detection signals, and align with operational and risk management objectives. The position participates in an established on-call rotation and provides escalated technical response during security events. Duties and Responsibilities Configures, maintains, and optimizes enterprise security platforms across endpoint, network, email, cloud, and identity environments. Tunes detection policies and controls to reduce false positives and improve signal quality. Ensures telemetry and logging integration across security systems. Implements security platform upgrades and configuration improvements. Performs advanced technical analysis during escalated security incidents. Identifies scope, root cause, and containment strategies during complex events. Implements containment and control adjustments as directed by the Information Security Officer. Leads post-incident hardening and detection improvement efforts. Oversees vulnerability scanning processes and prioritizes remediation activities in coordination with infrastructure teams. Supports penetration testing activities and implements corrective actions. Recommends security control enhancements and platform improvements to the Information Security Officer. Maintains documentation of system configurations and security architecture. Maintains confidentiality and integrity when handling sensitive information. Addresses support tickets as assigned within SLA limits. Performs other duties as assigned. Minimum Education and Experience Requirements Requires Bachelor's degree in cyber security, computer science, information management or related field, or equivalent combination of education and experience. Requires four years of progressive experience in the installation, maintenance, and operation of cybersecurity systems and applications or a related technical role. Requires experience configuring and managing enterprise security platforms, including firewalls, endpoint protection, and detection systems. Requires strong understanding of secure network architecture, including DNS, DHCP, packet inspection, and firewall policy management. Experience with enterprise security platforms such as Cisco or Palo Alto firewalls, XDR or endpoint detection platforms, DNS-layer security solutions, application delivery controllers, and enterprise multi-factor authentication systems. Physical Demands/Work Environment Physical demands refer to the requirements for physical exertion and coordination of limb and body movement. Unavoidable hazards refer to the job conditions that may lead to injury or health hazards even though precautions have been taken. The work is typically performed sitting at a desk or table or while intermittently sitting, standing, bending, crouching, or stooping. The employee occasionally lifts light and heavy objects. The work is typically performed in an office. This position is required to be on call as needed and must be available 365/24/7 to respond to security incidents. Emergency Preparedness Tier Level: 2 Special Certifications and Licenses Prefers Cisco security certifications or equivalent enterprise security certification. Prefers experience integrating security platforms with SIEM or analytics systems. Prefers scripting or automation experience (e.g., PowerShell, Python). Requires CJIS compliance eligibility. Requires valid Texas Driver's License. Benefits Flexible, comprehensive health benefits with multiple plan choices, including $0 premium options Full family coverage options for medical, dental, and vision Strong retirement security through TCDRS with generous 200% county matching (once vested & retirement eligible) County paid term and whole life insurance policies and long-term disability Work-life balance through paid time off, holidays, and other wellness initiatives Supportive networks through EAP and Marketplace Care Partners The County of Galveston is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, religion, sex, sexual orientation, age, disability, gender identity or expression, genetic information, veteran status or any other characteristic protected by law. GovernmentJobs.com