Cybersecurity Engineer

Do you enjoy investigating security risks, finding weaknesses before they become serious issues, and building practical defenses against evolving cyber threats? Korra Technology Group is looking for a Cybersecurity Engineer in San Diego, CA, to help protect our systems, networks and sensitive information through security engineering, monitoring and continuous improvement.

This is a hands-on role across security controls, vulnerability management, incident response and risk reduction. You’ll work with IT, infrastructure and development teams to strengthen existing defenses, investigate suspicious activity and keep security measures effective as technology and threats change.

Compensation: Starting from $115,000 per year, depending on experience, plus benefits

What You’ll Be Responsible For

• Implement and maintain security controls across networks, endpoints, servers, cloud environments and business applications.
• Monitor SIEM alerts and system logs to identify suspicious activity, potential intrusions and unusual access patterns.
• Investigate security incidents, assess their scope, preserve evidence and coordinate containment, remediation and recovery, including root-cause analysis.
• Conduct vulnerability assessments, prioritize findings by risk and work with system owners to fix weaknesses.
• Configure and maintain firewalls, IDS/IPS, endpoint protection, email security and other defensive technologies.
• Review access permissions, authentication methods, SSO and privileged accounts to enforce least-privilege access.
• Review cloud platforms (permissions, configurations, network rules, logging and encryption) and support security testing and remediation.
• Work with development teams on application security, secure coding, dependency management and security checks in CI/CD pipelines.
• Support audits and compliance activities, and maintain incident playbooks, procedures and reports on vulnerabilities and remediation progress.
• Contribute to security awareness efforts, including guidance on phishing, credential protection and safe data handling.

Essential

• Professional experience in cybersecurity, information security, security operations or a related IT security role
• Understanding of network security, operating systems, access controls, authentication and common attack methods
• Experience with security monitoring, log analysis, vulnerability assessment or incident investigation
• Familiarity with security tools such as SIEM platforms (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike), firewalls or vulnerability scanners (e.g., Nessus, Qualys, Tenable)
• Knowledge of least privilege, defense in depth, encryption and secure configuration
• Ability to interpret security findings and communicate risks and remediation steps clearly to technical and non-technical teams

Preferred

• Cloud security experience on AWS, Microsoft Azure or Google Cloud
• Scripting in Python, PowerShell or Bash to automate security tasks
• Knowledge of NIST, CIS Controls, ISO 27001, SOC 2 or HIPAA
• Certifications such as CompTIA Security+, CySA+, CISSP, CEH or a cloud security certification
• Experience with incident response exercises, penetration test remediation, threat modeling or security audits
• A bachelor’s degree in Cybersecurity, Computer Science, IT or a related field, or equivalent practical experience

• Full-time
• Monday to Friday, standard business hours.
• Health, dental and vision insurance, 401(k) with company match, paid time off and paid holidays., * 401(k)
• 401(k) matching
• Dental insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Vision insurance