Назад
Company hidden
2 дня назад

Security Engineer

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Engineer (SIEM/Cloud Security): Developing and operating continuous security monitoring capabilities for a federal customer with an accent on SIEM engineering, log pipeline optimization, vulnerability management, and security control implementation. Focus on designing detection and response workflows, eliminating asset visibility gaps with CAASM tooling, and automating monitoring across complex distributed environments.

Location: Portland, OR (Hybrid); remote candidates must closely align with the client’s core hours of 7 a.m. – 3 p.m. PT.

Company

Everforth hirify.global is the federal segment of Everforth, delivering cybersecurity, data and AI, and enterprise transformation solutions for defense, intelligence, and federal civilian agencies.

What you will do

  • Implement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure environments.
  • Design, tune, and validate detection logic, alerts, monitoring rules, and analytics; support incident triage, investigation, containment, remediation, and recovery.
  • Lead vulnerability management, security assessments, configuration reviews, hardening, control validation, and risk-based reporting.
  • Develop scripts, tooling, automations, and repeatable workflows for security operations, continuous monitoring, and incident response.
  • Integrate security tooling with CI/CD and operational workflows in partnership with DevOps, SRE, infrastructure, engineering, cloud, compliance, and SOC teams.
  • Document standards, runbooks, requirements, design decisions, and operational procedures while serving as an escalation point for complex security engineering issues.

Requirements

  • At least five years of experience in security engineering or closely related technical security roles.
  • Strong expertise with Linux and Windows, networking concepts and protocols, and common enterprise architectures.
  • Strong understanding of attack techniques, defensive controls, detection approaches, and secure configuration practices.
  • Hands-on experience with SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, firewalls, and network security platforms.
  • Experience contributing to incident response, root cause analysis, remediation planning, security assessments, and technical control validation.
  • Strong scripting or automation skills with Python, Bash, PowerShell, or similar languages.
  • Experience with cloud security tooling, infrastructure as code, and CI/CD tooling.
  • Ability to work independently, prioritize competing technical issues, make sound decisions under pressure, and communicate risks, findings, tradeoffs, and recommendations to technical and leadership audiences.

Nice to have

  • Cloud security experience with AWS, Azure, GCP, or hybrid cloud environments.
  • Familiarity with configuration management, CI/CD tooling, and DevSecOps practices.
  • Experience in regulated, high-availability, government, finance, healthcare, or mission-critical environments.
  • Experience designing controls for large-scale or highly distributed enterprise environments.
  • Experience leading technical workstreams or acting as an architecture authority.
  • CISSP, GIAC, Security+, CEH, cloud security, or vendor-specific certifications.

Culture & Benefits

  • Work supports mission-critical federal outcomes across defense, intelligence, and civilian agency environments.
  • Collaborative, accountable, mission-driven, and innovation-focused culture.
  • Opportunities to work with cybersecurity, data and AI, and enterprise transformation teams.
  • General employee benefits are available through hirify.global.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →