Senior Cybersecurity Engineer

Location: Downtown Dallas (Hybrid/ 3 Days On-Site) This role serves as a technical authority in cybersecurity engineering, partnering with IT Helpdesk, Operations, Infrastructure, and business teams to reduce cyber risk, strengthen organizational resilience, and support compliance and business objectives . The ideal candidate brings deep technical expertise, strong analytical and troubleshooting skills, and a proactive, threat-driven mindset. Success in this role requires the ability to translate complex security requirements into scalable, reliable, and operational solutions aligned with business needs, along with a high standard of professionalism, accountability, and integrity . Key Responsibilities Security Engineering & Architecture • eDesign, implement, and maintain security controls across on-premises, cloud, and hybrid environment • Engineer and support solutions for endpoint protection, identity and access management (IAM), network security, data protection, and cloud security • Lead secure architecture reviews to ensure security is integrated into new systems and infrastructure by design • Evaluate and implement cybersecurity tools such as EDR/XDR, SIEM, DLP, CASB, email security, and vulnerability management platform Threat Detection & Incident Response • develop and tune threat detection mechanisms aligned with threat intelligence and MITRE ATT&CK technique • support incident response activities including investigation, containment, remediation, and post-incident analysis • participate in incident response drills and tabletop exercise • collaborate with SOC and IT teams to improve detection accuracy and response time Vulnerability & Risk Management • lead vulnerability management processes including scanning, prioritization, remediation, and validatio • perform technical risk assessments and contribute to enterprise risk management effort • conduct threat modeling and security assessments for critical system • support cybersecurity awareness initiatives, including phishing simulations and reporting Cloud & Identity Security • Secure cloud platforms (e.g., Azure, AWS) using best practices and native control • implement identity-focused security measures such as MFA, Conditional Access, and Privileged Access Management (PAM • Support Zero Trust and passwordless authentication initiative Compliance & Governance • provide expertise in cybersecurity frameworks such as CIS, NIST CSF, NIST SP 800-171, CMMC, and ISO 2700 • 1Support audits and assessments by providing documentation and technical evidence • ensure security controls align with organizational policies and standard Collaboration & Leadership • Act as a trusted advisor to IT leadership and business stakeholder • Mentor junior engineers and analysts; contribute to standards and best practice • Develop documentation and provide training to Helpdesk team • Communicate complex cybersecurity topics clearly to technical and non-technical audience Qualifications • Bachelor’s degree in Information Technology, Cybersecurity, or related field (preferred • Proven experience designing and implementing enterprise security control • Experience with DLP, SIEM/XDR, and SOAR platform • Hands-on experience with scripting and automation (PowerShell, Python, Ansible, Puppet, or similar • )Familiarity with compliance frameworks such as NIST 800-171, CMMC, CIS Controls, and NIST CS • Understanding of penetration testing methodologies and tool • strong knowledge of Windows, Linux, networking, and security protocol Requirements • minimum 5 years of hands-on experience in cybersecurity engineering • expertise in at least three of the following areas • Endpoint security • Identity and Access Management (IAM) • Cloud security • Data Loss Prevention (DLP) • Network security • Vulnerability management • Relevant certifications (one of these three are required) • CISSP • GIAC Security Professional (GSP • Microsoft Certified: Cybersecurity Architect Expert • Advanced experience with Microsoft security tools (Entra ID, Defender, Intune, Purview, Conditional Access • Experience with next-generation cloud security platforms (e.g., Prisma, Zscaler) • Ability to travel occasionally for site visits, training, or conference • must be legally authorized to work in the United States