Cybersecurity Engineer Principal

What you'll do

• Administer, harden, and automate Windows and Linux systems using PowerShell and Bash scripts.
• Design and operate distributed SIEM architectures including data ingestion pipelines and parsing logic.
• Develop high-fidelity detection content such as correlation searches, dashboards, and automated alerts.
• Build and maintain SOAR playbooks for triage, enrichment, containment, and incident response.
• Manage enterprise EDR platforms by tuning behavioral detections and performing endpoint forensics.
• Operate vulnerability management programs aligned with NIST 800-53 and DISA STIG standards.
• Lead detection engineering activities including MITRE ATT&CK mapping and proactive threat hunting.
• Serve as a Tier III escalation point for SIEM, SOAR, EDR, and vulnerability platforms.

What we're looking for

• US Citizenship is required.
• BA/BS degree or equivalent experience is required.
• 8+ years of progressive cybersecurity, SOC, or security engineering experience are required.
• 5+ years of experience administering and securing Windows and Linux systems including Active Directory, IAM, and PKI are required.
• Hands-on SIEM engineering experience including architecture design, data onboarding, and detection development is required.
• Experience with Splunk (including SPL, Enterprise Security, and API integrations) and SOAR engineering is required.
• Enterprise EDR administration experience, specifically with CrowdStrike Falcon, is required.
• Vulnerability and compliance management experience aligned to NIST 800-53, FISMA, DISA STIGs, and CIS Benchmarks is required.