Security Engineer

We are seeking an experienced Security Engineer to support cybersecurity automation, custom security tool development, Identity and Access Management (IAM), Linux systems, and enterprise security platforms.

The consultant will work with security architects, engineers, SOC analysts, and incident responders to design, develop, implement, integrate, troubleshoot, and continuously improve security tools, automations, systems, and services., * Design, develop, deploy, and support security automation and custom security tools.

• Develop Python-based automations, scripts, APIs, SDK integrations, dashboards, web applications, and command-line utilities.
• Build automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, escalation, and reporting.
• Develop tools for CVE vetting, vulnerability enrichment, prioritization, tracking, and security decision support.
• Develop and maintain automation using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs.
• Integrate enterprise security technologies with APIs, web services, authentication methods, and structured data formats.
• Support IAM functions including provisioning, deprovisioning, access reviews, RBAC, service accounts, API credentials, authentication, and authorization.
• Deploy, configure, patch, monitor, optimize, and troubleshoot Linux systems, security sensors, collectors, connectors, applications, and Docker-based environments.
• Support security platforms including DSPM, ASM, IAM, vulnerability management, email security, endpoint security, SIEM, SOAR, XDR, logging, monitoring, network security, cloud security, and threat intelligence.
• Troubleshoot complex issues across applications, security platforms, operating systems, networks, identity services, and integrations.
• Monitor automation health, application availability, system performance, API errors, integration failures, vulnerability status, and security platform issues.
• Ensure high availability, resilience, backup/recovery, patching, secure configuration, and lifecycle management.
• Support SOC analysts, security engineers, incident responders, and agency stakeholders with technical troubleshooting and escalation.
• Create and maintain playbooks, runbooks, procedures, technical documentation, and knowledge-transfer materials.

• Strong hands-on Security Engineering experience across multiple cybersecurity technologies.
• Strong Python development and security automation experience.
• Experience with PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs.
• Strong Linux deployment, configuration, patching, scripting, monitoring, troubleshooting, and administration experience.
• Hands-on experience with IAM, SIEM, SOAR, XDR, vulnerability management, endpoint security, cloud security, logging, and monitoring.
• Experience integrating enterprise technologies using APIs, SDKs, web services, and authentication mechanisms.
• Strong troubleshooting and system integration experience.
• Experience developing or supporting web applications, APIs, dashboards, databases, and command-line tools.
• Experience with Docker/container-based environments.
• Understanding of security architecture, incident response, networking, access control, secure software development, and cybersecurity frameworks.

Preferred Skills

• Experience working as a Security Engineering Generalist in a large enterprise, multi-tenant, shared-services, or managed-services environment.
• Experience supporting SOC analysts, security engineers, and incident responders.
• Experience with Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold (WUG), or similar enterprise security platforms.
• Experience creating security playbooks, runbooks, procedures, and technical documentation.
• Full-stack development experience supporting internal applications, APIs, and databases.
• Strong knowledge of enterprise security architecture and security operations., * Bachelor’s degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field.
• 8+ years of relevant work experience; experience may be substituted for education.
• 5+ years supporting large IT environments, security systems, software development, and/or system deployments.
• Annual CJIS certification is required.

Preferred Certifications:

• CISSP
• Security+
• GIAC
• Linux, Python, Cloud, IAM, or other relevant security engineering certifications