Senior Cybersecurity Engineer

Location: Downtown Dallas (Hybrid/ 3 Days On-Site)

This role serves as a technical authority in cybersecurity engineering, partnering with IT Helpdesk, Operations, Infrastructure, and business teams to reduce cyber risk, strengthen organizational resilience, and support compliance and business objectives

. The ideal candidate brings deep technical expertise, strong analytical and troubleshooting skills, and a proactive, threat-driven mindset. Success in this role requires the ability to translate complex security requirements into scalable, reliable, and operational solutions aligned with business needs, along with a high standard of professionalism, accountability, and integrity

. Key Responsibilities

Security Engineering & Architecture

• eDesign, implement, and maintain security controls across on-premises, cloud, and hybrid environment
• Engineer and support solutions for endpoint protection, identity and access management (IAM), network security, data protection, and cloud security
• Lead secure architecture reviews to ensure security is integrated into new systems and infrastructure by design
• Evaluate and implement cybersecurity tools such as EDR/XDR, SIEM, DLP, CASB, email security, and vulnerability management platform

Threat Detection & Incident Response

• develop and tune threat detection mechanisms aligned with threat intelligence and MITRE ATT&CK technique
• support incident response activities including investigation, containment, remediation, and post-incident analysis
• participate in incident response drills and tabletop exercise
• collaborate with SOC and IT teams to improve detection accuracy and response time

Vulnerability & Risk Management

• lead vulnerability management processes including scanning, prioritization, remediation, and validatio
• perform technical risk assessments and contribute to enterprise risk management effort
• conduct threat modeling and security assessments for critical system
• support cybersecurity awareness initiatives, including phishing simulations and reporting

Cloud & Identity Security

• Secure cloud platforms (e.g., Azure, AWS) using best practices and native control
• implement identity-focused security measures such as MFA, Conditional Access, and Privileged Access Management (PAM
• Support Zero Trust and passwordless authentication initiative

Compliance & Governance

• provide expertise in cybersecurity frameworks such as CIS, NIST CSF, NIST SP 800-171, CMMC, and ISO 2700
• 1Support audits and assessments by providing documentation and technical evidence
• ensure security controls align with organizational policies and standard

Collaboration & Leadership

• Act as a trusted advisor to IT leadership and business stakeholder
• Mentor junior engineers and analysts; contribute to standards and best practice
• Develop documentation and provide training to Helpdesk team
• Communicate complex cybersecurity topics clearly to technical and non-technical audience

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field (preferred
• Proven experience designing and implementing enterprise security control
• Experience with DLP, SIEM/XDR, and SOAR platform
• Hands-on experience with scripting and automation (PowerShell, Python, Ansible, Puppet, or similar
• )Familiarity with compliance frameworks such as NIST 800-171, CMMC, CIS Controls, and NIST CS
• Understanding of penetration testing methodologies and tool
• strong knowledge of Windows, Linux, networking, and security protocol

Requirements

• minimum 5 years of hands-on experience in cybersecurity engineering
• expertise in at least three of the following areas
• Endpoint security
• Identity and Access Management (IAM)
• Cloud security
• Data Loss Prevention (DLP)
• Network security
• Vulnerability management

• Relevant certifications (one of these three are required)
• CISSP
• GIAC Security Professional (GSP
• Microsoft Certified: Cybersecurity Architect Expert

• Advanced experience with Microsoft security tools (Entra ID, Defender, Intune, Purview, Conditional Access
• Experience with next-generation cloud security platforms (e.g., Prisma, Zscaler)
• Ability to travel occasionally for site visits, training, or conference
• must be legally authorized to work in the United States