CYBERSECURITY ENGINEER III - 72004172

The State of Florida is hiring a Cybersecurity Engineer III in Tallahassee, FL (onsite). This role supports enterprise SOC enablement by engineering security tooling and telemetry pipelines that help improve detection, investigation, and incident response workflows.

You will work hands-on with SIEM, SOAR, EDR, and security data platforms to configure and sustain the systems that power analytic and operational processes across the organization. The position also emphasizes continuous improvement, documentation, and collaboration with SOC, engineering, architecture, IT, data, and cybersecurity teams.

Responsibilities

• Configure, maintain, and support enterprise security tools including SIEM, data platforms, SOAR, and related detection and telemetry systems.
• Support ingestion, parsing, normalization, and retention of security telemetry so data remains usable for detection and investigation.
• Monitor performance and availability of security tooling and flag issues impacting SOC operations.
• Evaluate telemetry sources for relevance, quality, and operational usefulness.
• Develop, implement, and maintain SIEM detections using structured detection logic and defined standards.
• Tune and validate detection rules to improve accuracy, reduce false positives, and maintain operational effectiveness.
• Translate detection requirements into platform-specific implementations.
• Test and validate detections and telemetry pipelines in development and production environments.
• Troubleshoot and resolve issues involving security tools, integrations, and telemetry pipelines, including root-cause analysis for detection failures and data gaps.
• Provide technical support during incident response activities when tooling or telemetry expertise is needed.
• Implement and maintain security tool and integration configurations aligned with established standards and architecture.
• Support deployment, updates, and lifecycle management of detections, data sources, and platform components.
• Assist with integrating new telemetry sources and security capabilities into existing platforms.
• Follow established change management and configuration management processes.
• Develop and maintain technical documentation, runbooks, and standard operating procedures.
• Identify opportunities to improve detection coverage, telemetry quality, and platform performance.
• Support continuous improvement initiatives related to security tooling, engineering processes, and SOC enablement.
• Participate in testing and validation of new tools, features, or integrations.
• Work with SOC analysts to understand detection requirements and operational challenges.
• Coordinate with engineering and architecture teams to support implementation of new capabilities.
• Collaborate with IT, data, and cybersecurity teams to support integrations and enterprise initiatives.
• Participate in team activities, projects, and knowledge-sharing efforts.
• Other duties as assigned.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field; equivalent professional experience may be considered in lieu of a degree.
• 3+ years of experience in cybersecurity engineering, security operations, or related technical roles.
• Hands-on experience configuring or supporting security tools such as SIEM, EDR, SOAR, or log/data platforms.
• Experience working with security telemetry, logs, or data pipelines used for monitoring and detection.
• Demonstrated experience developing, tuning, or supporting detection rules or alerting logic in a SOC or similar environment.
• Experience troubleshooting technical issues involving security tools, integrations, or data quality.
• Familiarity with incident response processes and supporting tooling or data requirements.
• Experience following change management or configuration management processes.
• Strong written and verbal communication skills.
• Relevant professional certifications such as CISSP, CCSP, cloud security certifications, or equivalent (preferred).

Technologies

• SIEM
• SOAR
• EDR
• Log/data platforms
• Security data platforms
• Security telemetry

Work Location and Physical Requirements

Tallahassee, FL (onsite). Additional position requirements include ability to sit and stand for extended periods of time, ability to drive and/or fly long distances, and ability to lift, push, and pull up to 30 lbs.

Compensation: USD 80,000 - 115,000 per year.