Security Engineer (Remote)

We’re looking for a Security Engineer for a remote. Candidates must be able to work Eastern time zone hours.

Skills & Qualifications:

• 5 years of experience in supporting large IT environments, security systems, software development, and/or system deployments
• Broad hands-on security engineering experience supporting multiple cybersecurity technologies, systems, integrations, and operational functions
• Experience developing security automations, scripts, integrations, utilities, and custom tools using Python
• Strong experience troubleshooting complex technical issues across applications, security platforms, operating systems, networks, identity services, and integrations
• Linux system deployment, configuration, patching, scripting, service management, monitoring, troubleshooting, and lifecycle management
• Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs

Preferred Skills:

• Hands-on experience serving as a security engineering generalist in a large, multi-tenant, shared-services, or managed-service environment
• Hands-on Linux, Docker, security sensor, monitoring, scripting, and platform administration experience
• Experience supporting SOC analysts, security engineers, incident responders, agency customers, and rapidly changing operational priorities
• Familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, WUG, or other enterprise security technologies and experience developing playbooks, runbooks, procedures, and technical documentation
• Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and other enterprise security technologies
• Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, systems administration, and industry-standard cybersecurity frameworks

Key Responsibilities:

• Assist in the planning, design, development, deployment, administration, and operational support of enterprise security automations and custom security tools
• Develop automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, escalation, and reporting
• Support a broad range of security platforms, including DSPM, ASM, IAM, vulnerability management, email security, endpoint security, SIEM, XDR, SOAR, logging, monitoring, network security, cloud security, and threat intelligence technologies
• Develop, test, deploy, and maintain automated security workflows, applications, and scripts using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs

Education/Certifications:

• Bachelor's degree in an Information Technology, Computer Science, Software Engineering, or Information Security related field; 8 years of relevant work experience may be substituted in lieu of education
• Preferred Certifications:
  • CISSP, Security+, GIAC, or other relevant cybersecurity certification
  • Linux, Python, Cloud, IAM, or other relevant security engineering or platform certification

The salary range for this position is $145,000 - $160,000.

TM Floyd & Company is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability.

We offer a generous array of benefits, depending on the length of assignment. We also offer a referral bonus of up to $1,000. Ask us for more details!

TM Floyd & Company participates in E-VERIFY.
AAP, EEO