Cyber Security Engineer empirical foods, inc. - 2.8 Dakota Dunes, SD Job Details Full-time 11 hours ago Qualifications Endpoint Security Intrusion detection analysis Threat hunting activities Associate's degree in cybersecurity System administration Azure Bachelor's degree in information technology Computer Science Security team coordination Associate's degree in computer science Technical documentation Writing skills Vulnerability Remediation Information Systems Public Cloud Mid-level Incident Escalation Endpoint Detection and Response (EDR) Technical solutions implementation Analysis skills Cloud security best practices implementation Associate's degree in information technology Continuous improvement Associate's degree in Information Systems Decision making Incident management operations support Security threat response protocols Log analysis tools Computer Information Systems Compliance support tasks

Full Job Description Overview:

The Cyber Security Engineer is responsible for monitoring, administering, and continuously improving the organization's security monitoring and threat detection capabilities. This position supports SIEM, EDR/XDR, incident response, threat detection, vulnerability management, and cybersecurity operations across enterprise and production environments. As the cybersecurity program matures, this position will develop into a trusted technical resource capable of independently managing daily security operations and providing continuity for the organization's cybersecurity function.

Responsibilities:

Security Operations & Incident Response Monitor SIEM, EDR/XDR, and MDR platforms. Investigate alerts and suspicious activity. Lead and coordinate incident response activities. Conduct threat hunting and event analysis. Improve detection rules and alert tuning. Evaluate SIEM log coverage and onboarding. Participate in shared after-hours security monitoring and incident response coverage. Respond to and escalate security-related requests and incidents received from the IT Help Desk. Vulnerability Management Coordinate vulnerability identification and remediation. Validate remediation efforts. Support risk reduction initiatives. Security Engineering & Administration Support implementation of security tools and controls. Assist with cloud security initiatives. Develop procedures and documentation. Support compliance and audit activities. Additional Ability to perform all essential job functions with or without reasonable accommodation. Perform all other duties as assigned. Must have regular and punctual attendance.

Qualifications:

Experience administering, monitoring, and investigating security events using SIEM platforms. Experience working with EDR/XDR technologies to detect, investigate, and respond to security threats. Knowledge of threat detection, incident response, and security monitoring practices. Understanding of network security fundamentals, endpoint security, and identity-based threats. Ability to analyze security alerts, identify root causes, and recommend remediation actions. Experience supporting Microsoft 365 and Azure security environments preferred. Understanding of operational technology (OT) and manufacturing environments preferred. Demonstrated Competencies Ability to work independently with minimal supervision. Strong analytical, troubleshooting, and problem-solving skills. Ability to solve and communicate complex problems, and document findings clearly in writing. Sound judgment on when to act versus escalate. Solutions-oriented, results-driven self-starter. Strong organizational ability. Ability to prioritize competing demands and manage multiple projects simultaneously.

Physical Requirements Office Setting Experience:

Minimum of three (3) years of cybersecurity, systems administration, network administration, infrastructure support, or a closely related IT discipline with demonstrated security responsibilities.

Education:

Associate's degree or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field preferred. CompTIA Security+ certification or equivalent foundational cybersecurity certification. Equivalent combination of education, certifications, and relevant experience will be considered.