Cyber Security Engineer

## Cyber Security Engineer Apply locations:
CA
- Rocklin:
CA-SLO Main:
WA
- Seattle/SoDo:
WA
- Bellingham:
OR
- Portland time type:
Full time posted on:
Posted Yesterday job requisition :
JR-000673
* Astound is a leading provider of internet, WiFi, mobile, and TV services, dedicated to connecting communities and empowering lives through innovative technology.  We also keep businesses connected with dependable fiber infrastructure and internet solutions backed by award-winning service, helping organizations thrive in an increasingly connected world.
** At the forefront of digital transformation, we continuously evolve our offerings to meet the dynamic needs of our customers—delivering reliable connectivity and groundbreaking digital experiences.
** Our commitment to excellence extends beyond infrastructure. We invest in our people through personalized training, coaching, and a supportive work environment that fosters growth and opportunity. Employees are empowered to represent a superior telecommunications company while making a meaningful impact in the communities we serve.
** We offer a robust benefits package that includes rewards, recognition programs, and employee discounts—ensuring our team members are supported in both their professional and personal journeys. At Astound, we believe in creating astounding possibilities for everyone, everywhere.
* A Day in the Life of theThe Cyber Security Engineer is responsible for the design, implementation, and continuous improvement of the organization’s security architecture, controls, monitoring, detecting, analyzing, and responding to cyber security threats. This role operates within the Security Operations function and plays a critical role in threat detection, incident response, vulnerability management, and continuous improvement of the organization's security posture from design to implementation.
* Lead and oversee 24/7 security operations, including monitoring, detection, triage, and incident response across enterprise environments (endpoint, network, identity, and cloud).
* Own the end-to-end incident response lifecycle - including identification, containment, eradication, recovery, and post-incident analysis,  - ensuring rapid, consistent, and high-quality execution.
* Drive root cause analysis, blast radius determination, and implementation of corrective and preventive actions.
* Establish, maintain, and continuously improve incident response playbooks, escalation procedures, and operational runbooks to enhance response effectiveness and reduce dwell time.
* Act as the primary escalation point for high-severity or complex security incidents, providing technical leadership, decision-making authority, and real-time guidance during active events.
* Lead advanced threat hunting operations using hypothesis-driven methodologies, leveraging EDR/XDR telemetry, SIEM data, network traffic, identity signals, and threat intelligence aligned to MITRE ATT&CK.
* Design, develop, and optimize detection engineering capabilities, including SIEM correlation rules, behavioral analytics, and custom detections to improve coverage and reduce false positives.
* Drive integration and tuning of security technologies (e.g., Crowd Strike, SIEM, SOAR, vulnerability scanners), ensuring alignment to enterprise risk priorities and operational efficiency.
* Define and track key SOC performance metrics (e.g., MTTD, MTTR, alert fidelity, containment time) to measure operational effectiveness and drive continuous improvement.
* Lead cross-functional coordination during incidents, partnering with IT, infrastructure, cloud, legal, HR, and executive leadership to ensure effective response and communication.
* Translate technical incidents into business impact, delivering clear, concise updates to leadership and facilitating decision-making at the executive level.
* Oversee vulnerability management efforts by correlating scan results with asset criticality, exploitability, and threat intelligence to drive risk-based prioritization.
* Lead post-incident reviews, tabletop exercises, and continuous improvement initiatives to strengthen organizational resilience and reduce repeat incidents.
* Mentor and develop…