Cybersecurity Solutions Engineer – Threat Vulnerability Engineering

The Solutions Engineer, Security is a hands on engineering role within the Threat & Vulnerability Management (TVM) organization, focused on building and scaling security platforms that enable automated detection, response, and risk reduction across cloud and hybrid environments.

This role emphasizes security platform engineering and automation, not day to day alert monitoring. You’ll partner closely with detection engineering, cloud, infrastructure, data, and risk teams to embed security controls directly into enterprise architectures and delivery pipelines while continuing to grow deep technical expertise in modern security engineering.

What You’ll Do:

• Engineer, integrate, and scale enterprise security platforms supporting automated detection, response, and exposure reduction.

• Design and maintain SOAR workflows and playbooks to reduce mean time to detect (MTTD) and respond (MTTR).

• Implement and support monitoring and detection capabilities across databases, networks, and cloud environments.

• Integrate security telemetry (SIEM, EDR, NDR, DAM, vulnerability tools) into unified detection and response pipelines.

• Build security integrations and deployments using Infrastructure as Code (IaC) and CI/CD pipelines.

• Partner cross functionally with cloud, DevOps, data, and risk teams to embed security into architecture and delivery.

• Evaluate new security tools through proofs of concept and contribute to platform roadmaps.

• Document designs, patterns, and integrations to support scalability and operational resilience.

What Experience You’ll Need:

• Bachelor’s degree in Information Systems, Engineering, Cybersecurity, or a related field or equivalent practical experience.

• Approximately 7 years of experience in security engineering, platform engineering, or a related technical role.

• Hands on experience engineering or integrating security platforms (e.g., SOAR, SIEM, EDR, DAM, NDR, vulnerability tools).

• Experience working with cloud environments (AWS, Azure, and/or GCP) and hybrid architectures.

• Working knowledge of Infrastructure as Code and automation concepts.

• Experience with scripting or integration using languages such as Python, PowerShell, or Bash.

• Strong collaboration and communication skills in a matrixed enterprise environment.

• Ability to translate technical findings into risk, impact, and actionable recommendations.

What Could Set You Apart:

• Direct SOAR playbook development and security automation experience.

• Experience implementing or supporting DAM, NDR, or vulnerability management platforms.

• Familiarity with CI/CD pipelines, APIs, and event driven architectures.

• Exposure to containerized or cloud native security controls.

• Experience operating in regulated environments (e.g., financial services, healthcare).

• Security certifications (e.g., GSEC, Security+, CISSP)

**Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week