Cyber Security Engineer

Must-Have Technical/Functional SkillsStrong experience independently managing complex cybersecurity initiatives, coordinating across multiple teams, and driving security projects from assessment through implementation.Hands-on experience with security monitoring, threat detection, incident response, and investigation across endpoint, network, identity, email, and cloud environments.Working knowledge of cybersecurity tools and technologies, including EDR, SIEM, Network Access Control (NAC), and vulnerability management solutions.Understanding of cybersecurity and privacy frameworks, standards, and regulations, including NIST Cybersecurity Framework, SOX, HIPAA, and NYDFS 23 NYCRR 500.Industry certifications such as CISSP, GIAC, GCIH, GCIA, GCFA, or equivalent are preferred.Willingness to participate in after-hours support and on-call rotations for security incidents and critical business requirements.Roles & ResponsibilitiesServe as a senior subject matter expert and escalation point for Cyber Defense, providing technical leadership, guidance, and mentorship to team members.Monitor, analyze, investigate, and respond to security alerts and events across endpoint, network, identity, email, and cloud environments using enterprise security tools.Perform alert triage and security case management by validating events, identifying false positives and genuine threats, documenting findings, assessing potential impact, and escalating incidents appropriately.Lead and support incident response activities, including incident scoping, evidence analysis, forensic support, documentation, containment, and escalation through formal incident response processes.Administer, maintain, troubleshoot, and optimize Cyber Defense technologies, including EDR, SIEM, NAC, vulnerability management, and other security monitoring and control platforms.Improve threat detection and response capabilities by tuning alerts, reducing false positives, addressing security visibility gaps, and enhancing tools, processes, and workflows.Independently manage technical and operational improvement initiatives, including security tool enhancements, process optimization, and reporting improvements.Collaborate with internal teams and external vendors to troubleshoot security technologies, coordinate remediation activities, and improve the effectiveness of Cyber Defense capabilities.Develop and enhance Cyber Defense policies, standards, procedures, and controls to support regulatory compliance and audit requirements.Participate in the IT Security on-call rotation and respond to high-priority security events and incidents as required.