Senior Security Engineer

3 days, 13 hours ago
GXA

GXA

GXA is an award-winning IT consulting and managed services provider based in Richardson, Texas. With a focus on empowering businesses in Texas, GXA offers a range of IT solutions including managed IT services, business IT consulting, disaster recovery ...

Internet Software & Services
11-50
Founded 2008

Description

  • Serve as a Tier 3 escalation point for active security incidents, including BEC, AiTM, ransomware, and account compromise.
  • Lead technical analysis during incident response and war room events, including log review, IOC hunting, and lateral movement tracing.
  • Execute containment and eradication actions such as endpoint isolation, session revocation, and credential resets.
  • Coordinate with SOC teams and vendor threat intelligence teams during active investigations and containment efforts.
  • Produce incident timelines, technical findings, and evidence packages for vCISO review and client follow-up.
  • Operate and support the gShield security toolstack, including Huntress, Microsoft Defender for Endpoint, Cyrisma, DNSFilter, and SIEM technologies.
  • Perform alert triage, risk identification, scan issue resolution, and SIEM query, alert, and rule review.
  • Assist with tuning detection logic, scan settings, and platform effectiveness across managed environments.
  • Execute technical remediation items identified through MRMMs, vulnerability reviews, and security recommendations.
  • Support internal security backlog remediation, including POA&M-related work and internal security initiatives.

Requirements

  • 5–7+ years of experience in cybersecurity, security operations, security engineering, or incident response roles.
  • Strong hands-on experience with incident response, threat detection, and security operations workflows.
  • Experience with security platforms such as Microsoft Defender, Huntress, DNSFilter, SIEM solutions, vulnerability management tools, and endpoint security technologies.
  • Ability to investigate security alerts, analyze logs, trace attacker activity, and support containment and remediation.
  • Familiarity with common attack types including phishing, BEC, account compromise, ransomware, and identity-based attacks.
  • Experience supporting security controls in Microsoft 365 and endpoint environments.
  • Strong documentation skills and ability to write clear technical procedures and findings.
  • Ability to work calmly and methodically during active incidents and escalations.
  • Experience in an MSP, MSSP, or multi-client environment is preferred.
  • Security certifications such as Security+, CySA+, SC-200, SC-300, AZ-500, GCIH, GCIA, or similar are a plus.
  • Applicants must include a link to a 1–2 minute video introduction in their cover letter, unless a reasonable accommodation is requested.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

AI Cybersecurity Engineer (Offensive Security & Threat Modeling)

Xenon7 Internet Software & Services

Xenon7 is hiring an AI Cybersecurity Engineer for a leading Egyptian financial institution to secure its on-premises AI and ML environment during its digital transformation.

Bash Docker Kubernetes Linux OpenShift Penetration Testing Python
1 week, 3 days ago

AI Safety & Red Teaming Specialist

Weekday 11-50 Construction & Engineering

Remote contractor role with one of our clients for an AI Safety & Red Teaming Specialist to evaluate and strengthen the safety, security, and robustness of next-generation AI systems.

Cybersecurity LLM
1 week, 6 days ago

Senior Software Engineer (Go) - AI Resilience & Security Enhancements (Contract)

Form3 251-1K Diversified Financial Services

Form3 is hiring a Senior Software Engineer to help deliver security and resilience initiatives for its cloud-native payments platform in a remote, collaborative engineering environment.

AWS Azure BDD CI/CD CockroachDB Elasticsearch Flux GCP GitHub Go HashiCorp Vault Java Kubernetes Microservices Prometheus TDD Terraform
2 weeks, 2 days ago

Okta Engineer

Resilient Co 11-50 Professional Services

A senior Okta Engineer is needed to design, configure, and operate identity solutions for application access and authentication modernization across environments at a client supporting migration away from legacy access patterns.

Apache Azure OpenID Connect Reverse Proxy
2 weeks, 2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers