CyberSecurity Engineer

Overview

The Staff Cybersecurity Engineer is a strategic team member responsible for safeguarding SGWS’s digital assets through the development, enhancement, and maintenance of highly complex security systems. This role involves working closely with leadership in the design and implementation of cutting-edge security measures, architecting secure networks, and countering sophisticated threats such as hacking and malware. The Staff Cybersecurity Engineer manages the analysis of network, server, and application logs to detect security incidents, conducts advanced intrusion detection, and ensures the organization remains resilient against evolving cyber threats.

This role governs multiple cross‑functional initiatives, serves as a trusted internal advisor, and applies extensive knowledge to complete complex assignments with significant organizational impact. Additionally, the Staff Cybersecurity Engineer mentors and coaches other engineers, contributing to the technical aspects of the service or platform with minimal guidance, and helps drive innovation in security practices across the organization. This role also ensures compliance with regulatory standards and champions continuous improvement in security practices.

• Manage, monitor, and respond to threats from EDR and SIEM solutions.
• Assist with computer forensic and eDiscovery requests as needed.
• Design comprehensive incident response playbooks ensuring well‑structured and effective responses to security incidents.
• Aggressively automate repeated tasks to allow the team to scale with the organization’s growth.
• Design and implement security solutions for intrusion detection and notification, security auditing, alerting and response, virus detection and removal, password complexity enforcement, and media protection.
• Validate baseline security configurations for operating systems, applications, and networking.
• Provide responsive support for escalating problems from System Administrators or other Engineers.
• Perform capacity and future growth planning of the enterprise security infrastructure to ensure a highly available security environment.
• Troubleshoot and evaluate risk management processes; assess and mitigate risks.
• Apply laws, regulations, policies and ethics in daily practice.
• Evaluate cyber threats and vulnerabilities.
• Respond to cybersecurity incidents.
• Create test plans, execute system tests, analyze results, coordinate feedback of results, and fix problems as needed.
• Research, design, and implement cyber security solutions for organization systems and products that comply with all applicable security policies and standards.
• Examine network, server, and application logs to determine trends and identify security incidents.

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, or equivalent combination of education and work experience.
• Typically, 8 – 10+ years of experience in cybersecurity, information security, or related field.
• At least 2 years of hands‑on experience managing EDR configurations, deployments, and automation in both on‑premises and cloud environments.
• 2 or more years of experience utilizing threat intelligence tools and frameworks.
• 2 or more years of hands‑on experience with an enterprise SIEM solution.
• 2 or more years of hands‑on experience utilizing Email security platforms.
• 2 or more years of hands‑on experience actively leading and conducting threat hunting operations.
• Experience in Dev Ops and Agile technology environments.
• Must be willing to participate in an on-call rotational schedule.

• Certified Information Systems Security Professional (CISSP) or equivalent certification.
• GIAC or Offensive Security Certifications – GPEN, GCIH, GREM, etc.
• Experience in both red team and blue team operations demonstrating expertise in offensive and defensive security strategies.
• Experience in Computer Forensics and eDiscovery.
• Experience with cloud security technologies and platforms.
• Experience managing complex, cross‑functional cybersecurity initiatives.
• Strong problem‑solving skills and ability to work independently with minimal supervision.
• Excellent…