Cyber Security Engineer

Empirical-Food; Dakota Dunes (SD); On-site; USD 95,000 - 120,000; Full time

Job summary

Empirical-Food is seeking a Cyber Security Engineer to monitor security events, respond to incidents, and drive threat detection improvements across enterprise environments.

You will lead incident response, perform threat hunting, and coordinate vulnerability management while supporting cloud security initiatives and audit activities. A 3+ year security background and relevant certifications are preferred.

Qualifications

• Minimum of three (3) years in cybersecurity or related IT with security responsibilities.
• Associate’s or Bachelor’s degree in cybersecurity/IT/CS; Security+ or equivalent preferred.
• Experience with Microsoft 365 and Azure security environments is preferred.

Responsibilities

• Monitor SIEM, EDR/XDR and MDR platforms to detect threats.
• Investigate alerts and suspicious activity and coordinate responses.
• Lead incident response activities and threat hunts.
• Improve detection rules and alert tuning for better coverage.
• Evaluate SIEM log onboarding and coverage.
• Support vulnerability identification and remediation efforts.
• Assist with cloud security initiatives and security tool deployment.
• Develop procedures and documentation; support audits and compliance.
• Maintain regular attendance and fulfill all essential duties.

Skills

Security monitoring

Incident response

Threat hunting

Vulnerability management

EDR/XDR technologies

Microsoft 365 & Azure security

OT/ manufacturing security

Education

Associate’s or Bachelor’s in Cybersecurity/IT/CS

CompTIA Security+ certification

Tools

SIEM platforms

EDR/XDR tools

Cloud security platforms

MDR platforms

Job description

Overview

The Cyber Security Engineer is responsible for monitoring, administering, and continuously improving the organization’s security monitoring and threat detection capabilities. This position supports SIEM, EDR/XDR, incident response, threat detection, vulnerability management, and cybersecurity operations across enterprise and production environments. As the cybersecurity program matures, this position will develop into a trusted technical resource capable of independently managing daily security operations and providing continuity for the organization’s cybersecurity function.

Responsibilities

Security Operations & Incident Response

• Monitor SIEM, EDR/XDR, and MDR platforms.
• Investigate alerts and suspicious activity.
• Lead and coordinate incident response activities.
• Conduct threat hunting and event analysis.
• Improve detection rules and alert tuning.
• Evaluate SIEM log coverage and onboarding.
• Participate in shared after-hours security monitoring and incident response coverage.
• Respond to and escalated security-related requests and incidents received from the IT Help Desk.

Vulnerability Management

• Coordinate vulnerability identification and remediation.
• Validate remediation efforts.
• Support risk reduction initiatives.

Security Engineering & Administration

• Support implementation of security tools and controls.
• Assist with cloud security initiatives.
• Develop procedures and documentation.
• Support compliance and audit activities.

Additional

• Ability to perform all essential job functions with or without reasonable accommodation.
• Perform all other duties as assigned.
• Must have regular and punctual attendance.

Qualifications

Skills and Abilities

• Experience administering, monitoring, and investigating security events using SIEM platforms.
• Experience working with EDR/XDR technologies to detect, investigate, and respond to security threats.
• Knowledge of threat detection, incident response, and security monitoring practices.
• Understanding of network security fundamentals, endpoint security, and identity-based threats.
• Ability to analyze security alerts, identify root causes, and recommend remediation actions.
• Experience supporting Microsoft 365 and Azure security environments preferred.
• Understanding of operational technology (OT) and manufacturing environments preferred.

Demonstrated Competencies

• Ability to work independently with minimal supervision.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to solve and communicate complex problems, and document findings clearly in writing.
• Sound judgment on when to act versus escalated.
• Solutions-oriented, results-driven self-starter.
• Strong organizational ability.
• Ability to prioritize competing demands and manage multiple projects simultaneously.

Physical Requirements

• Office setting.

Experience: Minimum of three (3) years of cybersecurity, systems administration, network administration, infrastructure support, or a closely related IT discipline with demonstrated security responsibilities. Education: Associate’s degree or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field preferred. CompTIA Security+ certification or equivalent foundational cybersecurity certification. Equivalent combination of education, certifications, and relevant experience will be considered.

#ZR