Cybersecurity Engineer

Cybersecurity Engineer

CTG is seeking to fill a cybersecurity engineer opening for our client. Location: Hybrid role - New Orleans, LA, Houston, TX, Little Rock, AR, Jackson, MS Duration: 12 months

We are seeking a cybersecurity engineer with 5–7 years of hands-on experience in enterprise security operations, endpoint security, identity security, cloud security, and network security. The ideal candidate will be responsible for implementing, managing, and optimizing cybersecurity technologies including CrowdStrike Falcon, Palo Alto Networks, IAM solutions, GitHub Security, Akamai Noname, and Carbon Black. This role will work closely with infrastructure, cloud, application, and security operations teams to strengthen the organization's security posture and support threat detection, incident response, and compliance initiatives.

This role is ideal for a mid-to-senior level cybersecurity professional who can operate across endpoint, identity, network, cloud, and application security domains while supporting enterprise-scale security operations.

Key Responsibilities

• Endpoint Security & Threat Detection
• Administer and optimize the CrowdStrike Falcon platform, including: Falcon Insight (EDR/XDR) Falcon Shield Falcon Exposure Management Falcon Identity Protection Falcon Next-Gen SIEM Falcon Cloud Native Application Protection Platform (CNAPP)
• Manage and support Carbon Black endpoint security solutions.
• Develop and tune detection rules, indicators of compromise (IOCs), and response workflows.
• Investigate security alerts, incidents, and suspicious activities across enterprise environments.
• Conduct threat hunting and proactive security monitoring activities.
• Identity & Access Management (IAM)
• Manage and support enterprise IAM solutions, including: Active Directory Ping Identity CrowdStrike Identity Protection
• Implement and maintain identity governance, authentication, authorization, and privileged access controls.
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity lifecycle management processes.
• Monitor identity-related threats and unauthorized access attempts.
• Network Security
• Configure, manage, and troubleshoot Palo Alto Networks Firewalls.
• Support GlobalProtect VPN deployments and remote access security.
• Implement firewall policies, security zones, NAT rules, and threat prevention controls.
• Monitor network traffic and investigate security events affecting network infrastructure.
• Cloud & Application Security
• Implement and maintain cloud security controls using CrowdStrike CNAPP capabilities.
• Partner with cloud engineering teams to secure cloud-native workloads and services.
• Support secure software development practices and code security initiatives through GitHub Security.
• Identify and remediate vulnerabilities across cloud and application environments.
• API Security
• Manage and optimize Akamai Noname API Security solutions.
• Monitor API traffic for threats, vulnerabilities, and misconfigurations.
• Collaborate with development teams to secure APIs throughout the development lifecycle.
• Security Operations & Incident Response
• Participate in incident response activities, including investigation, containment, eradication, and recovery.
• Perform root cause analysis and document findings from security incidents.
• Develop security dashboards, reports, and metrics for operational visibility.
• Support SIEM integration, log analysis, and threat intelligence initiatives.
• Vulnerability Management
• Conduct vulnerability assessments and security posture reviews.
• Prioritize remediation efforts based on risk and business impact.
• Collaborate with infrastructure and application teams to address identified vulnerabilities.
• Compliance & Governance
• Support security audits, regulatory compliance, and internal security assessments.
• Maintain security documentation, procedures, and operational standards.
• Assist in the development and enforcement of security policies and best practices.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field (or equivalent experience).
• 5–7 years of experience in cybersecurity engineering, security operations, or information security.
• Hands-on experience with: CrowdStrike Falcon Platform (EDR/XDR, NG SIEM, Exposure Management, Shield, Identity Protection, CNAPP) Palo Alto Firewalls and GlobalProtect VPN Active Directory and Identity & Access Management technologies Ping Identity solutions GitHub Security Akamai Noname API Security Carbon Black
• Strong understanding of: Incident response and threat hunting Security monitoring and SIEM technologies Network security concepts and protocols Cloud security best practices Identity and access management frameworks Vulnerability management processes

Preferred Qualifications

• Industry certifications such as: CrowdStrike Certified Falcon Administrator (CCFA) CrowdStrike Certified Falcon Responder (CCFR) Palo Alto Networks Certified Network Security Engineer (PCNSE) CISSP GIAC certifications Security+ Azure Security Engineer Associate or AWS Security Specialty
• Experience with scripting and automation using PowerShell, Python, or Bash.
• Experience supporting hybrid and multi-cloud environments.

Key Skills

• Endpoint Detection and Response (EDR/XDR)
• Identity Security & IAM
• Network Security
• SIEM & Log Analytics
• Threat Hunting
• Incident Response
• Vulnerability Management
• API Security
• Cloud Security
• Security Automation
• Risk Assessment
• Security Operations (SOC)
• Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.