Cybersecurity Engineer

Korra Technology Group is seeking a hands-on Cybersecurity Engineer to help safeguard systems, networks, and sensitive information in a San Diego, CA onsite environment. In this role, you will build and improve security protections through monitoring, vulnerability management, incident response, and risk-reduction work across IT, infrastructure, and development teams.

Key Responsibilities

• Implement and maintain security controls across networks, endpoints, servers, cloud environments, and business applications.
• Monitor SIEM alerts and system logs to detect suspicious activity, potential intrusions, and unusual access patterns.
• Investigate security incidents, determine scope, preserve evidence, and coordinate containment, remediation, recovery, and root-cause analysis.
• Perform vulnerability assessments, prioritize findings by risk, and partner with system owners to remediate weaknesses.
• Configure and maintain firewalls, IDS/IPS, endpoint protection, email security, and other defensive technologies.
• Review access permissions, authentication methods, SSO, and privileged accounts to enforce least-privilege access.
• Review cloud platforms for permissions, configurations, network rules, logging, and encryption, and support security testing and remediation.
• Collaborate with development teams on application security, secure coding, dependency management, and security checks in CI/CD pipelines.
• Support audits and compliance activities, and maintain incident playbooks, procedures, and reports on vulnerabilities and remediation progress.
• Contribute to security awareness efforts, including guidance on phishing, credential protection, and safe handling of data.

Requirements

• Professional experience in cybersecurity, information security, security operations, or a related IT security role.
• Understanding of network security, operating systems, access controls, authentication, and common attack methods.
• Experience with security monitoring, log analysis, vulnerability assessment, or incident investigation.
• Familiarity with security tools such as SIEM platforms (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike), firewalls, or vulnerability scanners (e.g., Nessus, Qualys, Tenable).
• Knowledge of least privilege, defense in depth, encryption, and secure configuration.
• Ability to interpret security findings and communicate risks and remediation steps clearly to both technical and non-technical teams.

Technologies

• SIEM platforms (Splunk, Sentinel)
• EDR (CrowdStrike)
• Firewalls, IDS/IPS
• Vulnerability scanners (Nessus, Qualys, Tenable)
• SSO, CI/CD pipelines
• Python, PowerShell, Bash
• AWS, Microsoft Azure, Google Cloud

Benefits

• Health, dental, and vision insurance
• 401(k) with company match
• Paid time off
• Paid holidays
• Health savings account
• Life insurance
• Parental leave
• Professional development assistance
• Referral program
• 401(k)
• 401(k) matching
• Dental insurance
• Vision insurance

Preferred Qualifications

• Cloud security experience on AWS, Microsoft Azure, or Google Cloud.
• Scripting in Python, PowerShell, or Bash to automate security tasks.
• Knowledge of NIST, CIS Controls, ISO 27001, SOC 2, or HIPAA.
• Certifications such as CompTIA Security+, CySA+, CISSP, CEH, or a cloud security certification.
• Experience with incident response exercises, penetration test remediation, threat modeling, or security audits.
• A bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field, or equivalent practical experience.

Position Details

• Location: San Diego, CA (onsite)
• Employment type: Full-time
• Schedule: Monday to Friday, standard business hours
• Salary: USD 115,000 per yearly