Cyber Defense Engineer - SIEM, MDR & Incident Response

Watsco, Inc; Miami (FL); On-site; USD 110,000 - 150,000; Full time

Job summary

Watsco Inc. is seeking a Security Engineer to operate and improve cybersecurity monitoring, incident response, vulnerability management, email and endpoint security, cloud and identity controls.

This role partners with IT owners and an MDR provider to reduce risk while maintaining independent review of security controls. You will lead incident response, manage vulnerability programs, and coordinate across vendors and teams to ensure strong security postures across the organization.

Qualifications

• Minimum 4+ years in cybersecurity engineering, security operations, incident response or equivalent defensive-security experience.
• Hands-on knowledge of SIEM, EDR, email security, identity and cloud security, vulnerability scanning, and network security.
• Ability to analyze logs and alerts, clearly communicate risk, preserve evidence, and coordinate remediation.

Responsibilities

• Operate or oversee SIEM, EDR, email-security, identity, cloud, and MDR monitoring; investigate alerts and tune detections.
• Lead technical incident response: triage, containment, evidence preservation, coordination, recovery, and post-incident review.
• Run vulnerability-management program: maintain coverage, rank risk, assign remediation, rescan, report overdue exposure.
• Define and validate MFA, conditional access, and privileged access requirements with Infrastructure.
• Review segmentation, firewall rules, remote access, cloud configurations, and new applications.

Skills

Analytical thinking

Risk communication

Incident response coordination

After-hours availability

Log analysis

Education

Bachelor's degree in CS/IS or related field

Cybersecurity certifications (e.g., CISSP, CISM)

Tools

SIEM

EDR

Email security (Proofpoint)

Cloud security

Vulnerability scanning

Windows environments

Job description

Watsco Inc. is seeking a Security Engineer to operate and improve cybersecurity monitoring, incident response, vulnerability management, email and endpoint security, cloud and identity controls.

This role partners with IT owners and an MDR provider to reduce risk while maintaining independent review of security controls. You will lead incident response, manage vulnerability programs, and coordinate across vendors and teams to ensure strong security postures across the organization.