Cyber Engineer III

Skip to main content

You may choose to display a cookie banner on the external site. You must specify the message in the cookie banner and may add a link to a relevant policy. If you are unfamiliar with these requirements, please seek the advice of legal counsel.

What are cookies?

Cookies are simple text files that are stored on your computer or mobile device by a website's server. Each cookie is unique to your web browser. Some information that we collect about you is collected passively through the use of "cookies." Cookies are small files of information, which save and retrieve information about your visit to the Website - for example, how you entered and navigated our Website, and what information was of interest to you. We use this information to remember you when you return and to customize our Website to your preferences. It will contain some anonymous information such as a unique identifier, website's domain name, and some digits and numbers. We may use two types of cookies: (i) Session cookies; and (ii) Persistent Cookies. Session Cookies and Persistent Cookies are categorized as: (a) Strictly Necessary Cookies; (b) Performance and Functional Cookies; (c) Targeting Cookies and (d) Social Media Cookies.

What types of cookies do we use?

Necessary cookies

Necessary cookies allow us to offer you the best possible experience when accessing and navigating through our website and using its features. These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. For example, these cookies let us recognize that you have created an account and have logged into that account. Strictly Necessary Cookies do not store any Personal Information.

Performance & Functional cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance. If you do not allow Performance Cookies we will not know when you have visited our site, and we will not be able to monitor its performance. (Examples: monitor website performance and collect anonymous data on how visitors use a website).

Targeting cookies

These cookies enable us and third-party services to collect aggregated data for statistical purposes on how our visitors use the website. These cookies do not contain personal information such as names and email addresses and are used to help us improve your user experience of the website. These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. Examples include: Criteo, Google.

Social Media Cookies

These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools. Examples include: Facebook, Instagram, Twitter).

How to delete cookies?

If you want to restrict or block the cookies that are set by our website, you can do so through your browser setting. Alternatively, you can visit www.internetcookies.com, which contains comprehensive information on how to do this on a wide variety of browsers and devices. You will find general information about cookies and details on how to delete cookies from your device.

Do not track signals

Currently, our systems do not recognize browser "do-not-track" requests. You may, however, disable certain tracking as discussed in the Cookies section (e.g., by disabling cookies). Please note that Hard Rock does not collect, and is not aware of third parties that collect, from users of the Website personal information about users' online activities across third party websites.

Clear GIFS, Pixel Tags and other technologies

Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer's hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs (a.k.a. web beacons, web bugs or pixel tags), in connection with our Website to, among other things, track the activities of Website visitors, help us manage content, and compile statistics about Website usage. You may view and change your preferences at any time by using the 'Privacy Settings' link found in the footer of our website. We and our third party service providers also use clear GIFs in HTML e-mails to our customers, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.

Third party analytics and tracking

We use automated devices and applications, such as Google Analytics, to evaluate usage of our Site. We also may use other analytic means to evaluate our services. We use these tools to help us improve our services, performance and user experiences. These entities may use cookies, tracking pixels and other tracking technologies to perform their services. We do not share your personal information with these third parties.

Contacting us

If you have any questions about this policy or our use of cookies, please contact us at dataprotection@shrss.com.

Read Full Privacy Message

Decline

Accept Cookies

Sign In

Search for JobsStay Connected

Cyber Engineer III page is loaded

Cyber Engineer III

Apply

locationsSupport Services Headquarters Building

time typeFull time

posted onPosted Today

job requisition idR15471

Our team members are the key to our company's success, and their health and well-being, as well as that of their families, is very important to us. We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance. Benefits may vary with employment status. To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits

Job Description:

At Seminole Hard Rock Support Services, we are on a mission to protect our guests, team members, and enterprise assets through world-class cybersecurity practices. As the Cybersecurity Engineer, you will implement, operate, and continuously improve the security controls that defend our systems, networks, and cloud environments across the enterprise, turning architecture and policy into running, automated, measurable defenses.

Reporting to the Manager of Cybersecurity Engineering, this role requires a hands-on, security-minded engineer who bridges the worlds of software development, cloud operations, and cybersecurity. You will configure and tune the enterprise security stack, build the integrations and automations that connect it together, and leverage AI to analyze security data at scale across Microsoft Azure (primary), Amazon Web Services, and Google Cloud.

This is a builder's role, not an architecture role. You do not define standards from the sidelines, you take reference architectures and security requirements and make them real: deploying controls, writing production-grade automation, and instrumenting the telemetry that turns raw events into actionable insight. Your software development and architecture background lets you treat security operations as an engineering problem, and your fluency with AI and large language models lets you accelerate detection, triage, and analysis far beyond manual effort.

You will work across systems, network, and cloud security domains, partnering with architecture, IAM, infrastructure, application, and SOC teams to ensure controls are deployed consistently, operate reliably, and improve continuously across all Seminole Hard Rock business units. You measure your impact in risks reduced, incidents prevented, and manual effort eliminated through automation.

Responsibilities

Systems & Endpoint Security

• Deploy, configure, and tune endpoint and extended detection and response controls across Windows and Linux server and endpoint fleets, keeping coverage complete and policies current
• Operate identity threat detection and privileged-access protections, investigating and responding to identity-based threats
• Implement and automate certificate, PKI, secrets, and non-human / machine-identity lifecycles
• Maintain authoritative asset inventory and continuously reconcile attack-surface visibility across the environment
• Harden system configuration baselines and remediate drift in partnership with infrastructure and platform teams

Network Security

• Configure and operate secure-access service edge, secure web gateway, CASB, and DLP controls, and enterprise remote access
• Manage edge and perimeter defenses: web application firewall, DDoS mitigation, and CDN policy, and API security posture and runtime protection
• Deploy and tune network detection and response, triaging anomalous activity and feeding findings to the SOC
• Operate the enterprise browser to enforce least-privilege, isolated access to sensitive applications via an enterprise browser platform
• Apply zero-trust segmentation and least-privilege access principles consistently across the network estate

Cloud & SaaS Security

• Implement and maintain cloud-native application protection and posture management across Azure (primary), AWS, and Google Cloud, remediating misconfigurations and preventing drift
• Govern SaaS security posture and contain non-human identity sprawl across the SaaS estate
• Operate data security posture, data access governance, and data discovery and classification across cloud and on-premises stores
• Implement cloud-native guardrails, least-privilege IAM, encryption, and logging baselines in partnership with cloud engineering
• Integrate security checks into infrastructure-as-code and deployment workflows so cloud workloads are secure by default

Security Automation, AI & Detection Engineering

• Build and maintain security automations, integrations, and response playbooks across the stack using APIs and SOAR
• Engineer telemetry pipelines that route, shape, and enrich security data for cost-effective analysis, and develop and tune detections and SIEM content
• Leverage AI/ML and large language models to analyze large volumes of security data, accelerate alert triage and enrichment, surface anomalies, and automate reporting and documentation
• Develop and maintain production-grade scripts, services, and tooling (e.g., Python, PowerShell, Go) that operationalize security controls and eliminate repetitive manual work
• Instrument metrics and dashboards that make control coverage, detection efficacy, and remediation timeliness measurable

Vulnerability, Exposure & Human-Risk Defense

• Operate the vulnerability management lifecycle end-to-end: scanning, risk-based prioritization, tracking, and verification of remediation
• Coordinate penetration testing and manage findings through to closure
• Monitor external attack surface, threat exposure, and credential/brand leakage, and track third-party and vendor risk
• Operate email defenses, tuning detection and response for phishing and account-takeover threats
• Support security awareness and phishing-simulation programs with the data and integrations they need

Collaboration & Continuous Improvement

• Partner with Cybersecurity Architecture, IAM, infrastructure, application, and SOC/MSSP teams to deploy controls consistently and resolve issues quickly
• Support GRC, audit, and privacy programs by automating evidence collection and continuous control monitoring
• Document standards, runbooks, integration designs, and operating procedures so controls are repeatable and supportable
• Research, prototype, and pilot emerging tools and AI-driven capabilities that improve detection, automation, and analyst efficiency
• Participate in an on-call rotation and incident response for a 24/7 gaming and hospitality environment

Qualifications & Experience

• 5-7+ years of combined experience in cybersecurity engineering, systems / network / cloud administration, or software / platform engineering, with at least 4+ years focused on hands-on security engineering in enterprise environments
• Strong software development proficiency, with hands-on experience in Python, PowerShell, Go, or similar languages, and the ability to build custom security tooling, integrations, and automation from scratch
• Deep infrastructure and systems expertise, with hands-on experience securing and operating workloads across IaaS, PaaS, and containerized (Docker, Kubernetes) environments on Microsoft Azure (required), with working experience in AWS and/or Google Cloud, across Linux and Windows
• Practical experience applying AI/ML or large language models to security data analysis, detection, triage, or automation
• Strong working knowledge of endpoint / XDR, identity and privileged access, network security (proxies, VPN, WAF, NDR, API security), and cloud security posture management
• Solid grasp of the vulnerability management lifecycle end-to-end, plus exposure and third-party risk monitoring
• Deep networking and systems fundamentals: TCP/IP, DNS, TLS/PKI, firewalls, segmentation, and zero-trust access models
• Experience integrating security tools and data sources via API, with familiarity in SOAR and SIEM content development
• Familiarity with regulatory and compliance frameworks relevant to gaming and hospitality (PCI-DSS, SOX, tribal gaming regulations, GLBA), preferred but not required
• Relevant certifications preferred: CompTIA Security+, Microsoft SC-series or AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer, GIAC (GCIH, GCSA, GCLD), Certified Kubernetes Security Specialist (CKS), or equivalent; CISSP a plus

Professional Skills

• Translate security requirements and architecture into deployed, automated controls that operate reliably and integrate cleanly into existing systems and workflows, without creating friction
• Operate as a hands-on engineer who personally builds, configures, tests, and ships high-quality automation and integrations, measuring success in problems solved, not tickets closed
• Troubleshoot methodically across systems, network, and cloud layers, isolating root cause under time pressure during incidents
• Collaborate effectively across cross-functional teams: cybersecurity, software development, cloud and infrastructure engineering, IAM, compliance, and the SOC
• Communicate technical findings and recommendations clearly to both technical peers and non-technical stakeholders
• Thrive in an Agile, fast-paced environment that values automation, rapid iteration, and measurable security outcomes over manual process
• Demonstrate a builder's mindset and a passion for using engineering and AI to make security faster, more consistent, and more scalable

Why work here?

Thank you for choosing us as your employer of choice! If you are ready for an exciting opportunity working in a creative environment where you can bring your authentic self to work, we want to connect with you!

Get In Touch

If you''re unable to find a position that matches your interest, please tell us a little about yourself, and we''ll recommend jobs that match your interests.

Get Started

About Us

Be Iconic represents the roots of our culture.

The Seminole Tribe of Florida remains the only unconquered tribe in the United States of America. The Tribe established Seminole Gaming in 1979, when it opened the first high-stakes bingo hall in the United States. Building on its rich heritage of courageous and groundbreaking achievements, the Seminole Tribe of Florida acquired Hard Rock International in March 2007-the first transaction of its kind by a Native American tribe.

Today, Hard Rock International remains one of the most globally recognized companies in the world, with Hard Rock Hotel, Casino, Cafe and Rock Shop venues in over 74 countries. With the continued growth of Seminole Gaming and Hard Rock International, Seminole Hard Rock Support Services was created to support all of our brands and lines of business.

With the largest global footprint in the hospitality industry for over 50 years, our number-one job is to bring fun and excitement to our team members and our guests!

Read More

Follow Us

*

Privacy Policy

2026 Workday, Inc. All rights reserved.