Cyber Security Engineer WaveDivision Holdings LLC
Overview
Design and implement security architecture to detect and respond to cyber threats. Lead 24/7 security operations and incident response. Drive threat hunting and detection engineering. Mentor SOC staff and improve metrics.
What You'll Do17
- 1Lead and oversee 24/7 security operations including monitoring detection triage and incident response across endpoint network identity and cloud environments
- 2Own end-to-end incident response lifecycle from identification containment eradication recovery and post-incident analysis
- 3Drive root cause analysis blast radius determination and corrective actions
- 4Establish and maintain incident response playbooks escalation procedures and operational runbooks
- 5Act as primary escalation point for high severity security incidents providing technical leadership
- 6Lead advanced threat hunting using EDR/XDR telemetry SIEM data network traffic identity signals and MITRE ATT&CK aligned threat intelligence
- 7Design and optimize detection engineering including SIEM correlation rules behavioral analytics and custom detections
- 8Integrate and tune security technologies such as CrowdStrike SIEM SOAR and vulnerability scanners
- 9Define and track SOC performance metrics like MTTD MTTR alert fidelity containment time
- 10Coordinate cross functional teams during incidents partnering with IT infrastructure cloud legal HR and executives
- 11Translate technical incidents into business impact for leadership decisions
- 12Oversee vulnerability management correlating scan results with asset criticality exploitability and threat intelligence
- 13Lead post-incident reviews tabletop exercises and continuous improvement initiatives
- 14Mentor SOC analysts develop investigation standards quality controls and career pathways
- 15Ensure evidence handling forensic integrity and audit ready documentation for NIST CMMC PCI compliance
- 16Identify emerging threats analyze alerts determine legitimacy and operationalize insights into defenses
- 17Perform initial triage and investigation of security incidents
Requirements20
- 15+ years building ETL pipelines with Spark and Airflow
- 2Spark and Airflow
- 37+ years of Cyber Security experience
- 4Identity & Access Multi Factor Authentication
- 5NGFW IDS/IPS WAF Proxy PKI Advanced Threat Protection cloud automation scripting
- 6Advanced Threat Protection cloud
- 7PKI automation
- 8Excellent written and verbal communication skills
- 9Proven independent decision making in high stress environment
- 10Ability to collaborate mentor and train team members
- 11Demonstrated passion for security self driven learning
- 12Strong interpersonal customer support verbal and technical writing skills
- 13Education: Bachelor’s degree in Cybersecurity Computer Science or related field
- 14Comprehensive Benefits Package Including 401k retirement with employer match Medical dental vision life and STD insurance
- 15Paid Time Off starting at 80 hours per year increasing with tenure
- 16Floating Holiday 40 hours per year
- 17Paid Holidays 7 days per year
- 18Paid Sick Leave varies by state and local laws
- 19Tuition reimbursement program
- 20Employee discount program
Salary Insight
$70 - $90k per year
Location
Required Skills
Similar open positions
Explore active roles that match your skills and interests.
Insurance Office of America, Inc.
VerifiedCyber Security Analyst – Enterprise Systems IT
The Cyber Security Analyst leads enterprise security initiatives to protect IOA systems. This fully remote role supports EST/CST time zones and offers flexibility for candidates within a 50-mile radius of Longwood FL. You will design and implement security frameworks while collaborating with cross-functional teams.
SPAHR SOLUTIONS GROUP LLC
VerifiedCybersecurity Protect Analyst
Lead technical cybersecurity liaison for subscriber organizations delivering advanced guidance on resolving complex security posture issues and patching delays. Serve as primary auditor for Data Element Dictionary governance overseeing validation rules for identity-attributed network and object-access events. Manage vulnerability tracking and KEV mitigation leveraging CVE NVD CVSS and CWE classifications. Conduct vulnerability assessments using ACAS and other enterprise scanning tools to provide prioritized remediation steps.
BCforward
VerifiedCyber Security Engineer, SOC & Incident Response
Own security monitoring and incident response for a Fortune 500 client in Phoenix, AZ. You will join BCforward's security operations team, working onsite to detect, investigate, and mitigate threats across a hybrid cloud and on-premise environment. This role demands hands-on expertise with SIEM platforms and EDR tools, with a direct impact on the client's security posture.
Tri-State Generation and Transmission Association Inc.
VerifiedSenior Cyber Security Engineer
Lead technical direction for enterprise security solutions at Tri-State, defining architecture and standards for firewalls SIEM IDS and other security platforms. Own risk management and incident response, driving improvements and mentoring engineers. This role offers competitive salary and comprehensive benefits.
Belcan, LLC
VerifiedCybersecurity Operations & Communications Lead
Own the security operations and communications strategy for a global enterprise, coordinating incident response across SIEM, SOAR, and EDR platforms. You lead a team of analysts, manage threat intelligence feeds, and craft executive-level briefings. This role sits at the intersection of technical operations and stakeholder communication, reporting directly to the CISO. You will drive the adoption of MITRE ATT&CK framework and NIST guidelines, shaping the organization's cyber resilience.
Eliassen Group
VerifiedCybersecurity Operations Lead
Hybrid role requiring 2-3 days weekly on-site in Alexandria VA. First 30 days full-time on-site. Strengthen enterprise security posture reduce risk and lead implementation optimization of security tools technologies and Continuous Diagnostics and Mitigation capabilities. Not program management only deep technical expertise active involvement in architecture engineering threat detection vulnerability management and security tool integration. Must hold US Citizenship and active Public Trust clearance. Contract to hire W2 benefits include medical dental vision 401k with match life insurance. Rate $80 to $100/hr.