Cybersecurity Security Engineer

RM Update: Guardicore is highly preferred for this role

Position Overview: We are seeking an experienced Cybersecurity Security Engineer to support a critical infrastructure and utilities environment, focusing on the deployment, administration, and optimization of enterprise security platforms.

This role spans a modern, multi-domain security stack including endpoint protection, identity security, data governance, network security, and observability pipelines. The ideal candidate brings strong hands-on experience across multiple security technologies and thrives in a highly regulated, complex environment supporting both IT and OT systems. 

Responsibilities:

• Administer and optimize the CrowdStrike Falcon platform, including Identity Protection with Active Directory integration
• Manage and enhance Varonis data security capabilities, including data discovery, access governance, and insider threat detection
• Configure, maintain, and troubleshoot Palo Alto firewalls and GlobalProtect VPN to enforce secure network access across IT and OT environments
• Support and expand Guardicore (Akamai) microsegmentation policies to reduce lateral movement and protect critical workloads
• Build and optimize Cribl pipelines for log routing, enrichment, and data reduction to support SIEM and security analytics platforms
• Collaborate with SOC, architecture, and IT teams to align security tooling with operational and compliance requirements
• Contribute to technical documentation, runbooks, and continuous improvement initiatives
• Support incident response activities related to managed security platforms 

Qualifications:

• 7+ years of experience in cybersecurity engineering or infrastructure security roles
• Hands-on experience with CrowdStrike Falcon, including Identity module and Active Directory integration
• Working knowledge of Varonis for data governance and threat detection
• Experience with Palo Alto Networks firewalls (Panorama preferred) and GlobalProtect VPN
• Experience with Guardicore (Akamai Segmentation) or similar microsegmentation technologies
• Familiarity with Cribl Stream or Cribl Edge for data pipeline and log management
• Strong understanding of Active Directory security concepts (Kerberos, LDAP, privileged access)
• Ability to operate in cross-functional enterprise environments

Preferred Qualifications:

• Experience supporting security in utilities, energy, or OT/ICS environments
• Familiarity with NERC CIP compliance requirements
• Experience working within regulated critical infrastructure environments
• Relevant certifications such as:
  • Palo Alto PCNSE
  • CrowdStrike CCFA / CCFR
  • AWS or general cloud security certifications 

Tools and Technologies:

• CrowdStrike Falcon (Endpoint & Identity Protection)
• Varonis Data Security Platform
• Palo Alto Networks (Firewalls, Panorama, GlobalProtect)
• Guardicore (Akamai Segmentation)
• Cribl (Stream / Edge)
• Active Directory / Identity Security
• SIEM and logging platforms