Cybersecurity Engineer

Cybersecurity Engineer

The Cybersecurity Engineer is responsible for the design, administration, and ongoing operation of security platforms that protect enterprise systems and data. This role requires hands-on technical expertise in SIEM, endpoint, network, and cloud security, along with strong incident response skills.

Key Responsibilities:

• Administer and optimize the enterprise SIEM platform (log sources, parsing, correlation rules, dashboards).
• Perform incident detection, response, and remediation, including forensic investigation and root cause analysis.
• Support SASE and ZTNA solutions, ensuring secure remote access and enforcing least-privilege connectivity.
• Manage and tune email security systems (secure email gateways, phishing defense, DMARC/SPF/DKIM enforcement).
• Provide systems administration support (patching, vulnerability remediation, system hardening, general administration).
• Collaborate with IT, networking, and compliance teams to align on security controls.
• Participate in on-call security incident rotation and lead technical response efforts.
• Document security processes, runbooks, and incident postmortems.
• Participate in major incident response.

Qualifications:

• 3–10 years in cybersecurity, preferably with SIEM and SOC experience.
• Familiarity with incident response frameworks (NIST, SANS).
• Experience with SASE/ZTNA platforms (e.g., Check Point Harmony, CATO Networks).
• Proficiency in email security technologies (Microsoft 365 Defender, Abnormal Security, Barracuda Networks).
• Strong understanding of Windows/Linux administration and networking fundamentals.
• Preferred certifications: CISSP, GCIA, GCIH, CCNP Security, or vendor-specific.

C.R. England is an equal opportunity at will employer and does not discriminate against any employee or applicant for employment because of age, race, religion, color, disability, sex, sexual orientation or national origin.