Cybersecurity Engineer

Role and Responsibilities

• We're looking for a Cybersecurity Engineer (not an Analyst) who can both build our security infrastructure and operate it day-to-day.
• This isn't a pure admin role or a pure analyst role - it's both.
• You'll architect and install enterprise-grade, on-prem security platforms for dual-datacenter active/active deployments.
• You'll then turn around and use those same tools operationally - writing detection logic, creating dashboards, building SOAR playbooks, and triaging what you built.

Responsibilities

You'll be primarily blue team - defending, detecting, and running the platforms you build. But if you have offensive security chops, this is a chance to participate and help us with red team functions as well.

• Architect and implement enterprise security platforms on-prem and in the cloud: CyberArk PAS (Vault, CPM, PSM, PVWA), Splunk Enterprise/ES (indexers, search heads, clustering, HA/DR), Tenable, SOAR, OKTA/SAML
• Design for scale: capacity planning, redundancy, role-based access control, and integration with AD, applications, and infrastructure
• Then operate what you build: custom dashboards, correlation rules, detection tuning, automated playbooks
• Own incident response and threat hunting using your own tooling - you're the analyst, not just the platform owner
• Support compliance (SOC 2, PCI DSS, NIST 800-53) with the audit trails and reporting your architecture produces

Desired Qualifications

• 4+ years securing enterprise environments, with real hands-on time both building (installs, architecture, HA/DR design) and using (detection, dashboards, response) security platforms - not just one or the other
• Deep proficiency in at least two of: CyberArk, Splunk Enterprise/ES, Tenable, SOAR (Phantom/Demisto/Resilient)
• Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation and integrations
• Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center)
• Comfortable owning something end-to-end: design it, deploy it, defend with it
• Bonus: offensive security background (Nmap, Burp, Metasploit, pentest/ethical hacking experience) - not required, but a strong plus given the red team opportunity above

Additional Skills - Nice to Have

• CISSP
• GCIH
• CEH,
• CySA+, or vendor certs (CyberArk Defender/Sentry, Splunk Certified Admin/Architect)

Pay and benefits

*The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process.

Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOAR, SOAR, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering