Sr. Cyber Security Engineer

Lead enterprise security initiatives across cloud, endpoints, identity, and manufacturing environments in a remote and hybrid role.

Responsibilities

• Design, implement, and support enterprise cybersecurity solutions and security architecture initiatives
• Perform security research, evaluate emerging technologies, and recommend improvements to the organization’s security posture
• Design and implement security controls across enterprise infrastructure, cloud platforms, endpoints, identity systems, and manufacturing environments
• Develop and maintain secure configurations, security standards, and technical documentation
• Lead and support cross-business cybersecurity projects with multiple business units, technical teams, vendors, and stakeholders
• Manage implementation of enterprise security technologies and security enhancement initiatives
• Coordinate project timelines, technical deliverables, testing, validation, and operational transition activities
• Support security integration efforts for cloud services, endpoint technologies, vulnerability management platforms, SIEM/SOAR solutions, and identity security initiatives
• Participate in planning and execution of security modernization and operational improvement projects
• Serve as a senior technical expert for enterprise cybersecurity operations and security technologies
• Administer, maintain, and optimize security platforms including:
  • Cloud security technologies
  • Endpoint Detection and Response (EDR/XDR)
  • Email security
  • Identity and access management
  • Data protection technologies
  • SIEM and SOAR platforms
  • Vulnerability management platforms
  • Threat intelligence integrations
• Develop, tune, and maintain advanced threat detections, correlation rules, analytics, dashboards, and automation workflows
• Use Kusto Query Language (KQL) for threat hunting queries, detections, reporting, and security investigations within Microsoft Sentinel, Microsoft Defender, and related platforms
• Develop and maintain SOAR playbooks and automation workflows to improve incident response efficiency and reduce manual tasks
• Conduct advanced threat hunting and log analysis across cloud, endpoint, network, and identity environments
• Support secure cloud operations and security monitoring across Microsoft Azure, Microsoft 365, AWS, and related enterprise technologies
• Lead vulnerability management initiatives across infrastructure, cloud services, servers, endpoints, applications, and operational technology environments
• Maintain in-depth operational experience with vulnerability management and scanning platforms such as Tenable, Qualys, Rapid7, Defender Vulnerability Management, or equivalent technologies
• Coordinate vulnerability remediation with infrastructure, server, networking, cloud, and application teams
• Analyze vulnerability data, prioritize remediation based on risk, and provide reporting to technical leadership and management
• Coordinate security validation and support penetration testing, including remediation tracking
• Collaborate with infrastructure, engineering, cloud, networking, DevOps, and business teams to implement secure solutions and resolve security issues
• Provide technical mentorship, training, and guidance to cybersecurity engineers, analysts, and IT personnel
• Assist teams with secure deployment practices, incident troubleshooting, and operational security best practices
• Support development of operational procedures, standards, and security documentation
• Lead and support incident handling, including investigation, containment, eradication, and recovery efforts
• Perform advanced forensic analysis and security investigations involving endpoints, cloud services, email systems, identity systems, and enterprise infrastructure
• Develop and maintain threat detections and response processes across SIEM, EDR/XDR, and cloud security platforms
• Analyze escalated alerts and suspicious activity to identify malicious behavior and reduce false positives
• Create and maintain custom detection logic and security analytics to improve threat visibility and response capabilities
• Develop remediation plans and coordinate incident response activities with technical teams and leadership
• Prepare investigation findings, root cause analysis, and executive-level incident reporting documentation
• Use PowerShell scripting and automation to support investigations, security administration, reporting, and operational efficiency initiatives

Requirements

• Bachelor’s degree preferred with 7 years of IT experience and a minimum of 4 years of cyber security experience
• At least one certification such as CISSP, ENCE, SANS GIAC, Cisco CCSP, CISM, or completion of a masters level degree program
• Expert-level experience supporting enterprise cybersecurity technologies and operations
• Advanced experience with SIEM and SOAR, including security automation, orchestration, and incident response workflow development
• Strong experience using KQL for threat hunting, analytics, detections, dashboards, and investigations
• Strong PowerShell scripting experience for automation, reporting, incident response, and systems administration tasks
• Deep understanding of incident response methodologies, threat detection engineering, and forensic analysis best practices
• In-depth experience with vulnerability management programs, vulnerability scanning platforms, remediation coordination, and risk prioritization processes
• Experience implementing and managing enterprise security technologies in cloud, hybrid, and on-premises environments
• Preferred: experience with Microsoft Sentinel, Microsoft Defender, CrowdStrike, Tenable, Qualys, Rapid7, or similar enterprise security platforms
• Preferred: experience with cloud security operations and securing Microsoft 365, Azure, AWS, or hybrid enterprise environments
• Preferred: understanding of secure software development practices, DevOps/DevSecOps concepts, and application security principles
• Experience supporting security monitoring, endpoint protection, identity security, email security, and data protection technologies
• Strong analytical, troubleshooting, communication, and project management skills
• Ability to handle sensitive and confidential information
• Ability to work independently and lead complex technical initiatives
• Participation in after-hours support and an on-call rotation as required
• Remote/hybrid candidates must maintain a secure working environment and collaborate effectively with distributed teams

Technologies

• SIEM
• SOAR
• EDR/XDR
• Kusto Query Language (KQL)
• Microsoft Sentinel
• Microsoft Defender
• PowerShell
• Microsoft Azure
• Microsoft 365
• AWS
• Tenable
• Qualys
• Rapid7
• Defender Vulnerability Management
• CrowdStrike
• Email security
• Identity and access management
• Data protection technologies
• Threat intelligence integrations
• Penetration testing

Benefits

• Choice of comprehensive medical plans
• Dental plan
• Vision plan
• Wellness program
• Critical illness insurance
• 401(k) plan with a company match
• Paid vacation
• Paid sick and parental leave for eligible employees
• Basic life Insurance
• Short-term and long-term disability coverage
• Employee assistance program
• Business travel accident coverage
• Supplemental life insurance
• Accidental death and dismemberment insurance
• Health spending account
• Traditional flexible spending account
• Dependent care spending account
• Tuition reimbursement program for undergraduate and certain graduate programs
• Educational opportunities
• Company-wide mentoring program
• Soft and hard skills training

Pay Range

• Base salary pay range: $0.00-$0.00 annual
• Incentive bonus eligibility

Location and Travel

• Denver, CO (hybrid); remote/hybrid role with occasional travel
• Must reside within the United States
• Occasional travel required to corporate headquarters in Denver, CO and other facilities as required
• Moderate travel: 11–29 days annually, including occasional travel to manufacturing facilities and corporate locations