Cloud and Endpoint Security Engineer

Sr Cybersecurity Engineer — Cloud and Endpoint Security

Salary
: $110,200 - $165,300, plus 10% annual bonus

Way of work
:
Hybrid – three days on location

Location
:
Columbus, OH

Relocation Assistance Provided

At NiSource, our Enterprise Security organization designs, builds, and sustains the advanced defenses that protect our critical infrastructure and customer trust.

The Senior Cybersecurity Engineer – Cloud and Endpoint Security plays a pivotal role in engineering, administering, and optimizing NiSource’s security platforms across endpoint and cloud environments.

This role combines hands‑on expertise in Crowd Strike Falcon and cloud security (Azure, AWS, GCP) to deliver unified threat visibility, response automation, and proactive risk reduction across IT and OT assets. The ideal candidate is equally comfortable engineering EDR solutions as they are designing secure cloud controls aligned with Zero Trust and the NIST Cybersecurity Framework (CSF 2.0).

• Engineer, administer, and optimize the Crowd Strike Falcon platform—covering policy tuning, sensor deployment, and health monitoring across enterprise endpoints.
• Develop and enhance custom detections, response logic, and playbooks leveraging Falcon Fusion, RTR, and threat intelligence data.
• Deploy, configure, and manage cloud security controls and integrations across Azure, AWS, and GCP—ensuring consistent protection across hybrid workloads.
• Integrate endpoint and cloud telemetry into SIEM (Splunk) and SOAR platforms for automation, enrichment, and real‑time containment.
• Partner with the SOC and Incident Response teams to investigate alerts, correlate cloud and endpoint events, and validate detection efficacy.
• Lead efforts to secure endpoint and cloud baselines aligned with CIS, NIST, and NiSource technical specifications.
• Drive automation of security processes and metrics reporting using Python, Power Shell, and API‑based integrations.
• Evaluate and pilot emerging security technologies, such as Falcon Discover, Identity Protection, or Cloud Workload Protection, to enhance defensive depth.
• Collaborate with infrastructure, architecture, and compliance teams to align controls with Zero Trust and regulatory frameworks (e.g., NERC, FERC, CIP).
• Support vulnerability and patch management integrations using Falcon Spotlight and cloud‑native tools.
• Participate in post‑incident analysis and continuous improvement cycles to strengthen overall security posture.

You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.

• 5+ years of experience in cybersecurity engineering, endpoint protection, or SOC environments.
• 3+ years of direct hands‑on experience with Crowd Strike Falcon or a comparable EDR/XDR platform.
• 3+ years of threat detection engineering, endpoint telemetry, and incident response processes.

• Industry certifications such as CCFA, CCFR, CCSP, GIAC, CompTIA, Azure Certifications, or ISC
  2.
• Familiarity with cloud workload and posture management tools (e.g., Prisma Cloud, Defender for Cloud).
• Experience with energy sector regulatory frameworks (NERC, FERC, CIP).
• Exposure to outsourced IT or managed service environments.
• Experience contributing to incident response and forensics investigations leveraging EDR telemetry.
• Familiarity with Splunk, Service Now, and SOAR integrations.
• Understanding of NIST CSF 2.0, MITRE ATT&CK, and Zero Trust architectures.
• Proficiency in scripting and automation using Power Shell, Python, or API integrations.

The preceding description is not designed to be a complete list of all duties and responsibilities required of the position.

Authorized to work in the United States without requiring sponsorship.

Value inclusion within your day to day responsibilities by respecting others perspectives and convictions, engaging others opinions, creating a safe environment where people, ideas, and opinions are valued within your Team/Customers and…