Security Engineer

We are seeking a hands-on, highly skilled Security Engineer to own day-to-day Security Operations Center (SOC) workflows, threat management, and core security infrastructure. In this role, you will take full operational ownership of incident monitoring, detection, and response across our network, endpoints, and email environments. The ideal candidate brings strong expertise in Palo Alto Networks infrastructure, deep operational experience with EDR/XDR platforms, and proven capability in mitigating email-borne threats. This role will also leverage AI-assisted security tools and automation to improve threat analysis, accelerate investigations, streamline repetitive tasks, and enhance overall SOC efficiency., SOC Ownership & Incident Response: Lead daily SOC monitoring, alert triage, log analysis, and incident investigations. Drive incident response from initial detection through root-cause remediation and post-incident reporting.

• Network & Perimeter Security: Manage, tune, and maintain Palo Alto firewalls, security policies, SSL decryption, App-ID/User-ID configurations, and threat prevention features.
• Endpoint Protection (EDR/XDR): Own deployment, agent health, policy tuning, and threat hunting across our EDR platform to protect all enterprise endpoints.
• Email Security: Oversee email security gateway solutions, defending against phishing, Business Email Compromise (BEC), account takeover attempts, and malicious attachments/URLs.
• Detection Engineering & Tuning: Continuously refine SIEM/XDR alert rules, reduce false positives, and automate manual incident response playbooks.
• Vulnerability & Threat Management: Conduct recurring vulnerability scans, prioritize patching with IT operations, and assess emerging threat intelligence for risks to the environment.
• Process & Documentation: Maintain incident response runbooks, threat models, architectural diagrams, and operational procedures to ensure continuous coverage.

• Experience: 4-7+ years of dedicated hands-on experience in cybersecurity, security operations, or threat engineering.
• Palo Alto Expertise: Strong experience configuring, administering, and troubleshooting Palo Alto Networks firewalls and Panorama. PCNSE certification is a strong plus.
• EDR/XDR Mastery: Direct experience managing enterprise EDR platforms (e.g., Palo Alto Cortex XDR, CrowdStrike, Defender for Endpoint, SentinelOne).
• Email Gateway Management: Proven experience configuring and tuning advanced email security platforms (e.g., Proofpoint, Mimecast, Defender for Office 365, Abnormal).
• Technical Depth: Deep understanding of TCP/IP, OSI model, DNS, active directory/identity access concepts, and common attack vectors (MITRE ATT&CK framework).

• Soft Skills: Calm under pressure during active incidents, strong technical troubleshooting abilities, and clear communication skills when reporting risks to IT leadership. *

• Preferred Certifications
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• GIAC Certifications (GCIH, GCFA, or GCDA)
• CompTIA Security+ or CySA+