Cybersecurity Engineer

We are seeking an experienced and adaptable
Cybersecurity Enginee
r to support and mature
Csquare’ssecurity program. This role is hands-on and multidisciplinary, requiring close collaboration across engineering, infrastructure, and operations teams. The successful candidate will strengthen detection capabilities, optimize security platforms, and respond to incidents that span hybrid, multi-tenant, and cloud-adjacent environments.

This position offers significant influence over how security is engineered and operated within a colocation model, where uptime, customer trust, regulatory compliance, and operational discipline are paramount. The role is well-suited to an engineer who values depth, ownership, and practical security outcomes.

• Own the configuration, tuning, and lifecycle management of security platforms supporting corporate IT and data center operations, including SIEM, XDR/EDR, MDR, vulnerability management, and the Microsoft Defender ecosystem.
• Engineer efficient, purposeful security telemetry pipelines focused on actionable signals rather than raw log volume.
• Integrate alerts and telemetry across identity systems, endpoints, network infrastructure, virtualization platforms, and cloud services to enable cohesive visibility.
• Customize and harden security tools to reflect operational realities of colocation environments, including shared infrastructure, management networks, and customer demarcation boundaries.
• Partner with key stakeholders across the company to ensure security controls are customized for our environment.

• Design, implement, and maintain high-confidence detection logic across corporate and data center environments.
• Treat detections as code—versioned, reviewed, validated, and continuously improved
• Evaluate detection coverage with a focus on threats relevant to the business (e.g., compromised admin access, management plane abuse, insider risk, and lateral movement).
• Participate in end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident analysis.
• Investigate identity compromise, phishing, endpoint alerts, anomalous network activity, and suspicious behavior within management or control environments.
• Perform root-cause analysis and drive durable corrective actions to reduce recurrence and operational risk.

• Collaborate with infrastructure, network, and operations teams to automate repetitive security and response tasks.
• Improve response workflows to balance security rigor with business needs and evolving threats.
• Reduce alert fatigue and operational noise through improved tuning, enrichment, and prioritization.

• Support internal security assessments, tabletop exercises, and incident simulations aligned to colocation and data center threat scenarios.
• Assist with validation of controls supporting customer assurance requirements and industry frameworks (e.g., SOC 1/2, ISO 27001).
• Contribute to continuous improvement initiatives related to system hardening, visibility, and detection capabilities.

• Strong understanding of fundamental computing and security concepts, including:
• Networking (TCP/IP, DNS, routing, switching)
• Windows and Linux operating systems
• Identity and privileged access management
• Demonstrated ability to develop meaningful detection logic using query languages, event correlation, and behavioral analysis.
• Experience working with platforms such as SIEM, EDR/XDR, SOAR, Defender, MDR, and network security tooling, with an emphasis on engineering, tuning, and optimization.

• Prior hands-on experience in cybersecurity engineering, security operations, incident response, or threat detection.
• Comfort leading technical investigations involving critical infrastructure or administrative access.
• Experience with scripting and automation (e.g., Power Shell, Python, Bash) and integrating tools via APIs is highly desirable.

• Operational Mindset:Understands the balance between strong security controls, reliability, and customer service commitments.
• Adaptability:Comfortable operating across corporate IT, data center operations, and evolving threat scenarios.
• Analytical Curiosity:Consistently seeks root cause and systemic improvements rather than surface-level fixes.
• Ownership:Proactively identifies and resolves security gaps, particularly those affecting…