Cyber Security Engineer: Cloud & Threat Defense

Cyberjobs; Omaha (NE); On-site; USD 110,000 - 150,000; Full time

Job summary

ES&S is seeking a Cyber Security Engineer to design, implement, and improve enterprise cybersecurity controls across systems, networks, and data. You will support security monitoring, threat detection, incident response, vulnerability management, and security architecture.

Ideal candidates have 3+ years of progressive cybersecurity experience and hands-on work with Azure security services, Defender XDR, Splunk, Cisco XDR, and governance using NIST CSF. Up to 10% travel may be required.

Qualifications

• 3+ years of progressive cybersecurity experience.
• Hands-on Azure Security Services experience (Sentinel, DCRs, Log Analytics).
• Experience with Defender XDR, ASR, and incident management.
• Familiarity with Splunk Enterprise Cloud, Splunk SPL, data ingestion and queries.
• Knowledge of security governance, risk, and compliance (NIST CSF, CIS controls).
• Ability to translate security findings into remediation actions and policy guidance.

Responsibilities

• Design, implement, maintain, and improve enterprise cybersecurity controls.
• Support security monitoring, threat detection, and incident response.
• Oversee vulnerability management, risk assessments, and remediation tracking.
• Contribute to security architecture, policy development, and standards.
• Coordinate cross-platform security operations across Azure, Defender XDR, Splunk, and Cisco XDR.

Skills

Threat detection

Incident response

Vulnerability management

Security architecture

Data analysis

Threat hunting

Tools

Azure Sentinel

Log Analytics

Azure Monitor

Kusto Query Language (KQL)

Microsoft Defender for Endpoint

ASR rules

Sentinel Workbooks

Splunk Enterprise Cloud

Splunk SPL

Cisco XDR

Cisco Umbrella

Job description

ES&S is seeking a Cyber Security Engineer to design, implement, and improve enterprise cybersecurity controls across systems, networks, and data. You will support security monitoring, threat detection, incident response, vulnerability management, and security architecture.

Ideal candidates have 3+ years of progressive cybersecurity experience and hands-on work with Azure security services, Defender XDR, Splunk, Cisco XDR, and governance using NIST CSF. Up to 10% travel may be required.