Security Tool Engineer - Cybersecurity Professional

Position Overview
We are seeking an experienced Cybersecurity Professional - Security Tools & Analytics to administer, engineer, integrate, automate, and support enterprise cybersecurity tools and infrastructure platforms. The ideal candidate will have strong hands-on experience with endpoint security, asset intelligence/CAASM, SIEM, scripting and automation, API integrations, infrastructure troubleshooting, and security compliance.

Responsibilities

• Administer, engineer, maintain, and troubleshoot enterprise security tools and infrastructure platforms, including CrowdStrike, Armis, Axonius, and Elastic Stack/Elastic SIEM.
• Support endpoint security, asset discovery and CAASM, security analytics, dashboards, monitoring, reporting, policies, integrations, and platform health.
• Develop and maintain integrations using REST APIs, Python, BASH/Shell, Perl, JavaScript, and related technologies.
• Automate security and infrastructure administration, monitoring, reporting, and operational processes.
• Perform command-line administration, configuration, O&M, and troubleshooting of security infrastructure, servers, applications, APIs, and network connectivity.
• Collaborate with Security, Infrastructure, Network, Server, and Operations teams to resolve technical issues and improve platform performance.
• Lead or support security tool implementations, upgrades, migrations, integrations, and enhancement initiatives.
• Gather technical and business requirements and develop technical specifications, workflows, implementation plans, and solutions.
• Track project requirements, dependencies, risks, issues, schedules, and action items.
• Evaluate existing processes and systems and identify opportunities for automation, optimization, and integration.
• Maintain technical documentation, system designs, configurations, procedures, runbooks, and service records.
• Apply security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
• Provide technical leadership and mentoring to junior team members.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, Information Security, Information Technology, Engineering, or a related field, or equivalent combination of education and experience.
• Approximately 8+ years of experience in cybersecurity, information security, security engineering, infrastructure engineering, or related IT disciplines.
• Current professional security certification such as CISSP, CISM, ISSEP, or equivalent/higher-level certification.
• Hands-on experience with enterprise security technologies, including CrowdStrike and preferably Armis and/or Axonius.
• Experience with Elastic Stack/Elastic SIEM or comparable SIEM/security analytics platforms.
• Strong scripting and automation skills using Python, BASH/Shell, Perl, JavaScript, or similar languages.
• Experience with REST APIs, system integrations, and security automation.
• Strong command-line administration and troubleshooting skills, with knowledge of network fundamentals and LAN/WAN troubleshooting.
• Strong analytical, problem-solving, communication, documentation, and collaboration skills.
• Ability to work independently, support cross-functional teams, and participate in a 24/7/365 on-call rotation.