Security Engineer Job Chandler area,Arizona USA,IT/Tech

Design, test, deploy, document, and maintain detection content across SIEM, XDR, NDR, identity, email, endpoint, network, cloud, and application security platforms
Translate threat intelligence, adversary tactics and techniques, incident findings, and business risk into prioritized detection use cases and analytics
Map detection coverage to recognized adversary behaviors and maintain traceability among threats, telemetry, analytics, response actions, and control owners
Validate and tune detections through structured testing, historical-log review, attack simulation, purple-team exercises, and post-incident analysis
Own the detection lifecycle from intake and prioritization through peer review, release, performance review, exception handling, and retirement
Monitor detection health, data freshness, rule execution, alert quality, and coverage gaps; drive corrective action
Partner with cloud, identity, endpoint, network, infrastructure, and application teams to onboard, normalize, and retain security telemetry
Assess log quality, event fidelity, field mapping, parsing, retention, and ingestion health
Document data dependencies and recovery procedures and contribute to detection architecture and use-case roadmaps across hybrid and multi-cloud environments
Investigate and respond to alerts and incidents through triage, containment, eradication, recovery, validation, and lessons learned
Perform root-cause analysis, reconstruct activity, preserve evidence, validate remediation, and improve detections, playbooks, and preventive controls
Configure, harden, maintain, and troubleshoot security controls across Azure, Azure Virtual Desktop, AWS, and Microsoft 365
Support certificate-based authentication, encryption, and PKI dependencies
Participate in on-call rotation and after-hours response as needed
Use Power Shell, Python, Bash, APIs, SOAR workflows, and automation to enrich alerts, test controls, improve data quality, orchestrate response, and reduce repetitive work
Build reusable queries, scripts, integrations, dashboards, guidance, runbooks, playbooks, SOPs, and knowledge articles
Evaluate AI-enabled security capabilities with appropriate human review and control
Partner with Security Operations, GRC, IT, Cloud, Networking, Systems, Endpoint, application owners, threat intelligence, vulnerability management, and red/purple teams

Requirements

College Degree or equivalent required
1 year related experience
Proficient use of applicable technology
Ability to follow technical instructions and guidelines
Ability to document daily activities and system functions
Able to work in team environment
Demonstrated ability to communicate verbally and in writing throughout all levels of organization both internally and externally
Ability to travel as required by business and on-call availability
Able to lift up to 50 lbs
Proven hands-on experience creating and tuning detections in an enterprise SIEM, XDR, or comparable security analytics platform
Strong ability to analyze authentication, endpoint, network, email, cloud, and application telemetry and translate findings into durable detection logic
Hands-on experience with security investigations, incident response, log analysis, root-cause analysis, and remediation validation
Working knowledge of adversary behavior, common attack techniques, detection lifecycle practices, and methods for validating detection coverage
Experience securing Azure and/or AWS environments and operating Microsoft 365 security capabilities
Experience supporting or securing Azure Virtual Desktop is required
Working knowledge of PKI, certificate-based authentication, encryption, enterprise logging architectures, networking, identity and access, endpoint security, and malware fundamentals
Strong Power Shell skills…