Security Engineer

Kforce's client in Salt Lake City, UT, a growing financial services organization, is seeking a Security Engineer to join its cybersecurity team. This is a highly visible role focused on strengthening and maturing the organization's security program while serving as a technical leader for key security technologies and initiatives. Key Responsibilities:

• Own, administer, and mature the organization's Endpoint Detection and Response (EDR) program
• Serve as the subject matter expert for EDR technologies, including CrowdStrike or comparable enterprise platforms
• Lead and expand the organization's Attack Surface Management program
• Drive security engineering projects from planning and design through implementation and operational support
• Support modern authentication and identity security initiatives, including MFA and access management improvements
• Evaluate, implement, and optimize Zero Trust security technologies and strategies
• Participate in initiatives to modernize remote access solutions, including ZTNA and SASE/SSE platforms
• Manage remediation efforts related to security findings, vulnerabilities, and attack surface exposure
• Collaborate with infrastructure, operations, and business teams to improve overall security posture
• Research emerging threats and technologies and recommend security enhancements
• Document security procedures, standards, and technical architectures
• Support incident response, investigation, containment, and recovery activities when required

Requirements:

• 3-5+ years of hands-on Security Engineering, Cybersecurity, or Enterprise Security experience
• 3-5 years of hands-on experience in information security or enterprise IT, with a focus on attack surface, endpoint, and identity security
• Demonstrated experience administering enterprise security tools and platforms
• Strong hands-on experience with Endpoint Detection and Response (EDR) solutions such as CrowdStrike, SentinelOne, Microsoft Defender, Carbon Black, Cortex XDR, Trellix, or similar technologies
• Demonstrated experience administering anattack surface management platform (Rapid7 or comparable) and building asset inventory from discovery data
• Experience with endpoint detection and response tooling, preferably CrowdStrike, including policy configuration, sensor health, and detection triage
• Working knowledge of SASE, CASB, and SSPM concepts, with experience supporting or leading the deployment of at least one

Experience implementing multi-factor authentication for endpoint or workstation sign-in, and familiarity with enterprise password management platforms such as Dashlane

• Understanding of information security principles, data classification, and regulatory requirements applicable to financial institutions (e.g., GLBA, FFIEC, ISO 27001)
• Experience participating in incident response, including investigation, containment, and remediation, and the ability to lead technical projects across multiple teams
• Strong analytical, troubleshooting, and documentation skills, with the ability to communicate technical concepts clearly to both technical and non-technical audiences