Cyber Security Engineer

We are looking for a highly experienced Senior Cybersecurity Engineer with advanced skills in Splunk, CrowdStrike, vulnerability management, and identity provider (IDP) systems. This role will be instrumental in building robust detection, response, and identity-integrated security capabilities to defend against evolving threats. The ideal candidate will have a hands-on, security engineering mindset and a proven track record working across endpoint protection, SIEM, and identity systems.

Key Responsibilities:

• Deploy, manage, and optimize Splunk Enterprise Security (ES) for real-time detection, alerting, and correlation of security events.
• Design and build custom SPL queries, dashboards, and threat detection logic, integrating data from CrowdStrike, IDPs, and vulnerability scanners.
• Lead the vulnerability management program, including scanning (Qualys, Tenable, Rapid7), analysis, risk prioritization, and driving remediation.
• Maintain and configure CrowdStrike Falcon, including prevention policies, detection tuning, response playbooks, and integration with SIEM and SOAR platforms.
• Leverage CrowdStrike telemetry for threat hunting, endpoint investigations, and threat actor tracking.
• Integrate and manage IDP platforms (e.g., Okta, Azure AD, Entra ID) to secure identity access, enforce MFA/SSO, and detect anomalous user behavior.
• Correlate identity, endpoint, and vulnerability data to drive risk-based alerting and incident response.
• Collaborate with incident response, IAM, infrastructure, and compliance teams to maintain a resilient and auditable security posture.

Required Qualifications:

• Bachelors degree in Computer Science, Cybersecurity, or related field.
• 5+ years of experience in cybersecurity roles with significant hands-on expertise in:
• Splunk (SPL, ES, dashboards, alerting)
• CrowdStrike Falcon (EDR management, threat hunting, integration)
• Vulnerability Management (Qualys, Tenable, or Rapid7)
• IDP platforms (Okta, Azure AD, Entra ID, etc.)
• Experience with scripting (Python, Bash, PowerShell) and API integrations.
• Familiarity with MITRE ATT&CK, threat modeling, CVSS, and Zero Trust principles.

Preferred Certifications:

• Splunk Certified Architect or Admin
• CrowdStrike Certified Falcon Administrator (CCFA) or higher
• Okta Certified Professional or Azure Security Engineer Associate
• CISSP, OSCP, GIAC (GCIH, GMON, GCIA)