About the job Cybersecurity Engineer
Cyber Security Operations Engineer III Role Overview
Position Summary:
Seeking an experienced Cyber Security Operations Engineer III to lead critical security initiatives in a high-demand corporate technology environment. This opportunity focuses on incident response, threat hunting, security infrastructure operations, technical mentorship, and the development of advanced security automation processes. The environment is large-scale, complex, and compliance-driven (PCI, HIPAA, SOX), with modern technologies including next-generation firewalls, orchestration platforms, and advanced authorization workflows.
Key Responsibilities:
- Incident Response & Threat Management:
- Serve as the incident lead during active cyber event management response activities, coordinate with internal teams, and document all actions.
- Conduct proactive threat hunting, vulnerability review, and penetration testing.
- Develop automated incident response and orchestration solutions, leveraging tools like Palo Alto firewalls and related automation platforms.
- Support ongoing post-incident analysis and drive improvements from after-action reviews.
- Cyber Security Infrastructure Operations:
- Act as the top escalation point for cybersecurity infrastructure issues, guide and support junior team members.
- Provide technical support and oversight on a variety of security technologies: next-generation firewalls (strong focus on Palo Alto), IDS/IPS, credential vaults, SIEM, endpoint protection, and cloud security controls.
- Collaborate on the design, planning, documentation, and improvement of operational processes, emphasizing automation and authorization enhancements.
- Ensure regulatory compliance with standards such as PCI-DSS, HIPAA, and SOX across projects and daily operations.
- Threat Analysis & Risk Leadership:
- Perform advanced analysis of malware, network intrusions, and unauthorized activities to identify causes, attack vectors, and containment strategies.
- Mentor team members in best-practice investigation, documentation, and playbook creation.
- Lead risk scoring, mitigation verification, and validate ongoing process improvements.
- Stay current with emerging threat techniques and integrate new security strategies as needed.
- Technical Leadership & Staff Development:
- Mentor IT staff through hands-on guidance, lead training sessions, and disseminate best practices.
- Conceive and deploy security automation tools and processes, focusing on building efficient orchestration solutionsespecially in the areas of firewall management and incident automation.
- Review and improve technical documentation and reference materials.
- Assist in developing internal educational content and security awareness programs.
Requirements:
CategoryMust-Have QualificationsPreferred Qualifications
Education
Bachelor's degree or equivalent combination of education/experience in a relevant fieldCyber Security/Technology degree; multiple industry certifications (CISSP, PCNSE, etc.)
Experience
8+ years with progressive cyber security technology design/admin/incident response in large environments; mentoring/training; direct compliance/standards (HIPAA, PCI, SOX); advanced IT troubleshootingAdvanced experience supporting/building large security environments; process improvement leadership
Technical Skills
Advanced skill with next-gen firewalls (strongly prefer Palo Alto), orchestration tools, automation, authorization management, SIEM, scripting, and incident response; strong technical communication. Familiarity with Active Directory, Microsoft/Linux OS, IAM, pen testing, wireless networking, and secure application development
Special Focus:
- Palo Alto Firewalls: Solid hands-on experience with policy management, rule configuration, threat prevention, and automation/integration with orchestration platforms.
- Authorization & Orchestration: Advanced ability to design and deploy authorization workflows, security workflow automation, and incident response playbooks, driving rapid, consistent mitigation and containment strategies.
Additional Details:
- Flexible scheduled shifts may include nights and weekends; on-call 24/7.
- Ability to work under pressure and handle crisis events.
- Responsible for maintaining strict confidentiality given the highly sensitive nature of the role.
Salary Range: $120,000 - $155,000
Target Candidates:
Best suited for technical leaders ready to own end-to-end security incident management, infrastructure operation, and proactive threat hunting who can mentor others and champion automation/authorization within a complex, regulated environment. Experience with Palo Alto firewalls and security orchestration tools is especially valuable.