Cyber Security Engineer I
On-siteDallas, Texas, United States
Job Summary
Monitor IT and OT environments using SIEM tools to identify, investigate, and escalate security incidents in real time while maintaining situational awareness through continuous event analysis. Support incident detection, triage, containment, and investigation activities, collecting evidence and documenting findings in alignment with established response playbooks. Perform scheduled vulnerability assessments across IT and OT systems, track remediation progress, and verify system hardening to ensure timely risk reduction. Configure, update, and maintain security tools and agents, troubleshooting performance issues and maintaining clear documentation of configurations. Apply OT/ICS security principles to monitor industrial control systems, collaborating with engineering teams to assess security gaps and participate in risk assessments. Communicate security findings to technical and non-technical stakeholders and prepare evidence for audits. Stay current with security trends through training and research, participating in tabletop exercises and hands-on training opportunities.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Security, Information Technology, or related field
- 3 or more years of practical cybersecurity experience in a production environment
- demonstrating applied knowledge of cybersecurity fundamentals through real-world projects, operations, or equivalent hands-on work
- 1–3 years of hands-on experience in IT or OT environments
- exposure to security operations, monitoring, or system administration
- Demonstrated ability to work with technical systems, troubleshoot problems, and document findings
- Demonstrated ability to implement and operationalize new technologies in production environments
- Exposure to cloud platforms like Azure, AWS, or Google Cloud
- basic understanding of cloud-native security tools and setups
- Familiarity with AI-assisted or data-driven threat detection tools
- Strong working knowledge of Windows and Linux/Unix operating systems
- Strong working knowledge of command-line interfaces
- Basic proficiency in networking concepts: TCP/IP, DNS, routing, VLANs, firewalls, and network segmentation
- Foundational knowledge of endpoint security, including antivirus, EDR/XDR concepts, and endpoint hardening
- Ability to read, understand, and analyze security logs and event data
- Scripting fundamentals in Python or PowerShell
- ability to write or read/modify existing scripts
- Basic understanding of vulnerability scanning tools
- Basic understanding of vulnerability assessment processes
- Familiarity with Identity and Access Management (IAM) principles
- Familiarity with access control concepts
- Excellent written and verbal communication abilities
- ability to clearly explain technical concepts to both technical and non-technical audiences
- Strong problem-solving mindset
- intellectual curiosity about how systems work and fail
- High attention to detail
- ability to follow procedures
- ability to identify process improvements
- Ability to manage multiple tasks
- ability to prioritize effectively
- ability to work under pressure during security incidents
- Ability to work independently with minimal supervision
- ability to escalate appropriately when needed
- Adaptability
- willingness to learn new tools, technologies, and security methodologies
- The employee must be able to operate computer and other office equipment
Desired Qualifications
- OT/ICS security frameworks: NIST, CIS, IEC 62443, or NERC CIP
- Familiarity with cloud security concepts (AWS, Azure, or Google Cloud)
- Familiarity with cloud-based security tools
- Manufacturing, industrial automation, or critical infrastructure environment experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.