Cyber Security Engineer

247Hire; Vienna (VA); Hybrid; USD 110,000 - 170,000; Full time

Job summary

247Hire is seeking a security automation engineer to develop and maintain automation scripts for Defender, Panorama, and cloud platforms. You will build data pipelines, integrate security APIs, and support incident response in hybrid cloud environments.

Ideal candidates have a CS/Cybersecurity degree or equivalent, strong scripting skills (Python, PowerShell, Bash, Go), familiarity with SIEM/SOAR, and experience with IaC tools such as Terraform and GitHub. Certification in Azure/AWS is a plus.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Proficiency in scripting/programming languages such as Python, PowerShell, Bash, or Go.
• Experience with Microsoft Defender APIs, Palo Alto Networks SCM/Panorama APIs, and cloud security APIs (Azure, AWS, or GCP).
• Solid understanding of cloud security principles, IAM, network segmentation, and compliance frameworks.
• Familiarity with infrastructure-as-code (IaC) and automation tools (e.g., Terraform, Hugo, GitHub).
• Experience with SIEM and SOAR platforms.

Responsibilities

• Develop and maintain automation scripts and applications to support security operations, configuration management, and policy enforcement across Microsoft Defender, Palo Alto SCM, and cloud platforms (Azure, AWS, GCP).
• Integrate APIs from Microsoft Defender XDR, Palo Alto Panorama/SCM, and cloud-native security tools (e.g., Azure Security Center, AWS Security Hub) into internal systems and dashboards.
• Build and maintain data pipelines for ingesting and normalizing logs into SIEM platforms (e.g., Microsoft Sentinel, Splunk).
• Collaborate with cloud and security engineers to implement secure configurations, monitor compliance, and respond to threats in hybrid environments.
• Automate remediation workflows and support SOAR integrations for incident response.
• Monitor platform health, performance, and configuration drift across cloud and on-prem environments.
• Document code, integration processes, and platform configurations for operational transparency and audit readiness.

Skills

Python

PowerShell

Bash

Go

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Tools

Terraform

GitHub

Hugo

Job description

Key Responsibilities:

• Develop and maintain automation scripts and applications to support security operations, configuration management, and policy enforcement across Microsoft Defender, Palo Alto SCM, and cloud platforms (Azure, AWS, GCP).
• Integrate APIs from Microsoft Defender XDR, Palo Alto Panorama/SCM, and cloud-native security tools (e.g., Azure Security Center, AWS Security Hub) into internal systems and dashboards.
• Build and maintain data pipelines for ingesting and normalizing logs into SIEM platforms (e.g., Microsoft Sentinel, Splunk).
• Collaborate with cloud and security engineers to implement secure configurations, monitor compliance, and respond to threats in hybrid environments.
• Automate remediation workflows and support SOAR integrations for incident response.
• Monitor platform health, performance, and configuration drift across cloud and on-prem environments.
• Document code, integration processes, and platform configurations for operational transparency and audit readiness.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Proficiency in scripting/programming languages such as Python, PowerShell, Bash, or Go.
• Experience with Microsoft Defender APIs, Palo Alto Networks SCM/Panorama APIs, and cloud security APIs (Azure, AWS, or GCP).
• Solid understanding of cloud security principles, IAM, network segmentation, and compliance frameworks.
• Familiarity with infrastructure-as-code (IaC) and automation tools (e.g., Terraform, Hugo, GitHub).
• Experience with SIEM and SOAR platforms.

Preferred Qualifications:

• Certifications such as Microsoft Certified: Azure Security Engineer Associate, PCNSE, AWS Certified Security – Specialty, or CISSP.
• Experience with hybrid cloud environments and multi-cloud security architectures.
• Knowledge of MITRE ATT&CK, CIS Benchmarks, and NIST frameworks.
• Experience with DevSecOps pipelines and CI/CD security integration.