Principal Cyber Security Engineer

Principal Cyber Security Engineer

Responsible for advanced endpoint defense, Zero Trust Architecture (ZTA), overarching cybersecurity architecture, and the resolution of high‑complexity security incidents across a hybrid cloud and Windows environment.

• Act as the state’s lead security architect, defining overarching cybersecurity architecture across all domains, advising the CISO on emerging threats, evaluating enterprise‑wide security investments, and setting statewide technical standards.
• Lead engineering for Crowd Strike Falcon and enterprise Zero Trust frameworks, architecting conditional access policies that securely bridge Google environments with Active Directory.
• Optimize sensor and log ingestion across Windows servers, cloud‑native workloads, and multi‑cloud (GCP, Azure, AWS) environments to ensure 100% visibility.
• Serve as the final escalation point for the most complex security breaches, performing deep‑dive forensics spanning memory analysis on obfuscated Windows malware to anomalous behavioral tracking within Google Workspace audit logs.
• Reconstruct attack timelines, identify persistence, and lead technical containment for state‑level crises.
• Utilize Python, Power Shell, and Bash to automate complex security workflows, building custom API bridges using Google Workspace Admin SDK, GCP Security Command Center, and Crowd Strike APIs to orchestrate automated response actions.
• Design infrastructure security using IaC (Terraform/Ansible) to ensure all systems meet CJIS, IRS Pub 1075, and NIST 800‑53 requirements by default.
• Implement hardening baselines tailored for both cloud‑native workloads and Windows systems based on emerging threat intelligence.
• Perform proactive threat modeling on new enterprise systems before deployment and provide technical mentorship to CSOC analysts and junior engineers.

• Preference for candidates with a proven track record of handling high‑stakes breaches and managing enterprise‑scale security platforms across hybrid Windows/Cloud environments.
• Preference for candidates with verifiable project history in custom security tooling and integration.
• Mastery of general cybersecurity architecture, enterprise defense strategies, and unified threat management.
• Expert knowledge of the Crowd Strike Falcon platform, Real Time Response (RTR), sensor deployment, Windows kernel hardening, and Active Directory security.
• Deep expertise in securing Google environments (Google Workspace, Google Cloud Platform IAM, Security Command Center) and bridging cloud environments with Active Directory.
• Expert proficiency in Python and Power Shell for security automation and REST API interaction (especially Google Admin SDK and Crowd Strike APIs).
• Advanced knowledge of memory forensics, malware analysis, and cloud telemetry hunting via the MITRE ATT&CK framework.
• Working knowledge of applying CJIS, IRS Pub 1075, and NIST 800‑53 controls to both cloud and local assets.
• Ability to translate complex technical risks into business terms for executive leadership.

Bachelor’s Degree (typically in Computer Technology).

• Minimum: 1–3 years of progressive work experience (typically in Computer Technology).
• Substitution: 4–7 years of progressive work experience (typically in Computer Technology).

None.

• Employee may sit comfortably to perform the work; may also involve walking, standing, bending, carrying light items, and driving an automobile.
• Special physical demands are not required to perform the work.

• FLSA:
  Nonexempt.
• Successful applicants must pass a comprehensive fingerprint‑based background check to comply with CJIS and IRS Pub 1075 access requirements.
• Must be available for 24/7 on‑call rotation and immediate emergency response during state‑level cyber incidents.

• Comprehensive health, dental, and vision insurance.
• Paid vacation, sick leave, FMLA, and holidays.
• Retirement plans:
  Pension and 457B.
• Flexible schedules and work‑life balance options.
• Professional development and training opportunities.
• Employee assistance program and wellness program.

Human Resource Contact:
Jennifer Erickson – jennifer.erickson1 – 307‑275‑1460

The State of Wyoming is an Equal Opportunity Employer and actively supports the ADA and reasonably accommodates qualified applicants with disabilities.