Cyber Security Engineer
Cyber Security
Cybersecurity Operations
Cybersecurity Tools
Data Platform
Data Security
Digital Marketing
Email Security
Endpoint Security
Facilities Management
Firewall Security
Incident Management
Incident Response
Information Security
Information Technology (IT)
InfoSec
Log Management
Project Management
Security
Security Information And Event Management
Security Monitoring
Security Operations
Splunk
Splunk Siem
Job Description
Cyber Security Engineer opportunity in The Woodlands, TX (onsite) for a 20 Months + Extension engagement, serving as a Tier 3 escalation lead for enterprise security tooling and incident support.
Responsibilities
- Serve as a Tier 3 escalation point for security incidents, investigations, and complex troubleshooting
- Manage and optimize security tools and platforms across the enterprise
- Build, review, and troubleshoot Palo Alto Next-Gen Firewall rulesets
- Administer and monitor CrowdStrike EDR (CrowdStrike Falcon) and Proofpoint Email Security
- Operate and fine-tune SIEM capabilities, including alert use case creation and optimization
- Use Microsoft cloud security tools (including Defender for Endpoint, Defender for Identity, Purview, etc.) to secure cloud environments
- Lead the vulnerability management program: scanning, prioritization, remediation coordination, and reporting
- Collaborate with MSSPs and delegate tasks while ensuring SLAs and quality standards are met
- Conduct threat hunting, vulnerability assessments, and risk analysis
- Develop and maintain security documentation, runbooks, and incident response procedures
- Stay current on emerging threats, vulnerabilities, and regulatory requirements
Requirements
- 5+ years of hands-on experience in cybersecurity roles
- Strong experience with Palo Alto Networks firewalls (ruleset creation, troubleshooting)
- Strong experience with CrowdStrike Falcon (including CrowdStrike EDR)
- Strong experience with Proofpoint Email Security
- Strong experience with Microsoft Security Suite (Defender tools and related capabilities such as Defender for Endpoint, Defender for Identity, Purview)
- Strong experience with SIEM platforms, such as Splunk, Sentinel, QRadar, and Elastic (ELK)
- Proven experience working with MSSPs, third-party security vendors, and/or clients
- Solid understanding of network security, endpoint protection, and cloud security principles
- Strong analytical and problem-solving skills
- Excellent communication and documentation abilities
Preferred Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, or a related field
- Completion of a recognized cybersecurity training program (example: SANS, or NIST NICE Framework-aligned bootcamps)
Tech Stack
- Palo Alto Next-Gen Firewall, Palo Alto Networks firewalls
- CrowdStrike Falcon, CrowdStrike EDR
- Proofpoint Email Security
- SIEM platforms: Splunk, Sentinel, QRadar, Elastic (ELK)
- Microsoft Cloud Security Tools: Defender for Endpoint, Defender for Identity, Purview (and related Microsoft Security Suite tools)
Location: The Woodlands, TX (onsite)
Compensation: USD 81 - 81 per hourly
Experience: 5 years minimum