Security Engineer, Lead (Cybersecurity)

Location: Plano, Texas, United States. Onsite role. Applicants must already have the right to work in the United States and must not require current or future immigration sponsorship.

Company

hirify.global Financial Services is hirify.global and Lexus's finance and insurance business, delivering customer-focused financial services within hirify.global's mobility organization.

What you will do

• Architect, configure, maintain, and optimize complex SIEM environments, including log parsing, normalization, enrichment, storage, and platform health.
• Design and maintain SOAR playbooks and automated workflows for alert triage, enrichment, and response.
• Deploy and manage security agents across on-premises, cloud, and hybrid endpoint environments.
• Develop and tune detection rules, correlation logic, alert thresholds, and data source integrations in partnership with threat intelligence and SOC teams.
• Build Python and PowerShell tooling, API integrations, and automation for security engineering workflows.
• Create SOPs, engineering runbooks, and documentation for platform maintenance, data onboarding, and incident support.

Requirements

• 5+ years of cybersecurity engineering experience.
• Hands-on expertise with SIEM administration and engineering, SOAR development, log management, data source onboarding, and security agent lifecycle management.
• Subject matter expertise in one or more SIEM or SOAR platforms, such as Splunk, Microsoft Sentinel, Chronicle, Elastic, Palo Alto XSIAM/XSOAR, Phantom, or Swimlane.
• Strong knowledge of log sources, parsing, normalization, Syslog, CEF, JSON, XML, and Windows Event Logs.
• Proficiency in Python and PowerShell for automation, integrations, and custom engineering tools.
• Strong communication and collaboration skills across SOC, infrastructure, and leadership stakeholders.

Nice to have

• Bachelor's degree or equivalent experience in cybersecurity, computer science, engineering, or information technology.
• Experience in regulated industries, including finance, healthcare, or government.
• Experience with CQL, SQL, KQL, SPL, EQL, Yara, Bash, CrowdStrike Falcon, or Halcyon.
• Experience with AWS and Azure security, cloud-native logging, access management, API integrations, CI/CD, or infrastructure as code.
• Relevant AWS, Azure, Cribl, or CrowdStrike certifications.

Culture & Benefits

• Team-oriented, flexible, and respectful work environment.
• Professional development programs and tuition reimbursement.
• Comprehensive health and wellness plans, paid holidays, and paid time off.
• 401(k) plan with company matching and an annual retirement contribution.
• Vehicle purchase and lease programs, tax-advantaged accounts, family support services, and relocation assistance where applicable.