Cybersecurity Engineer

Meriplex; California; On-site; USD 120,000 - 180,000; Full time

Job summary

Meriplex seeks a Cyber Security Engineer to deliver hands-on engineering and advisory services for client environments, spanning infrastructure, cloud, networks, and endpoints. You will design, deploy, configure, and support security technologies while collaborating with clients to align security with business goals.

The role requires strong knowledge of security frameworks, incident response, and cross-functional teamwork, with experience in AD/Windows, XDR/EDR, and SIEM technologies.

Qualifications

• 5+ years of security industry experience or equivalent skill level.
• 5+ years of experience managing Active Directory and Windows Server.
• Bachelor’s degree in a relevant field is a plus but not required.
• Experience with systems administration and network infrastructure is required.
• Previously assessed, developed, and implemented, operationalized, and documented comprehensive security technologies and processes.
• Certifications: Security+, CCSP or similar desired; CISSP preferred.

Responsibilities

• Design and secure security infrastructure to ensure a robust and resilient security posture.
• Perform complex deployments of security technologies.
• Execute information security activities such as vulnerability management, application development security, business continuity, networking, risk management, etc.
• Collaborate with cross-functional teams to integrate security controls and protocols into the client's infrastructure and applications.
• Develop and maintain security documentation, including architecture diagrams, standard operating procedures, and incident response playbooks.
• Understand various security framework standards and compliance requirements (NIST 800-53, ISO 270001, NIST CSF, CIS) and their business impact.
• Stay up-to-date with emerging security threats and proactively implement countermeasures.
• Provide technical expertise and guidance on security best practices and regulatory compliance.
• Actively research, evaluate, and drive next generation security technologies and solutions.
• Assist in incident response activities such as firewall log review, firewall configuration, SIEM review, XDR review.

Skills

Customer service

Networking knowledge

Secure design

Interpersonal skills

Defense in depth

Analytical thinking

MITRE ATT&CK

Bash

PowerShell

Python

KQL

EDR/XDR

Regulatory compliance

Education

Bachelor’s degree in a relevant field

Security+ or CCSP

(ISC)² CISSP

Tools

Active Directory

Windows Server

VMware

Fortinet

Palo Alto

SonicWALL

SentinelOne

CrowdStrike

SIEM

Job description

The Cyber Security Engineer provides hands‑on cybersecurity engineering and advisory services to Meriplex clients. This role works directly with client environments to design, deploy, configure, and support security technologies across infrastructure, cloud services, networks, and endpoints. The engineer partners with clients to understand their technical environment, security maturity, and business objectives, and delivers solutions that improve security outcomes while aligning with operational needs. This role also provides subject‑matter expertise, documentation, and guidance to both clients and internal teams supporting client engagements.

Key Responsibilities and Duties

• Design and secure security infrastructure to ensure a robust and resilient security posture.
• Perform complex deployments of security technologies.
• Execute information security activities such as vulnerability management, application development security, business continuity, networking, risk management, etc.
• Collaborate with cross-functional teams to integrate security controls and protocols into the client's infrastructure and applications.
• Develop and maintain security documentation, including architecture diagrams, standard operating procedures, and incident response playbooks.
• Ability to understand various security framework standards and compliance requirements, such as NIST 800-53, ISO 270001, NIST CSF, CIS, how those standards impact business operations, and what organizations must do to meet those requirements.
• Stay up-to-date with emerging security threats, vulnerabilities, and industry trends, and proactively recommend and implement countermeasures to enhance our clients’ security posture.
• Provide technical expertise and guidance to clients and internal teams on security best practices, technologies, and regulatory compliance requirements.
• Actively research, evaluate, and drive next generation security technologies and solutions to solve the organizations needs.
• Assist in incident response activities such as firewall log review, firewall configuration, SIEM review, XDR review.

Knowledge, Skills, Abilities, and Behaviors

• Strong customer service skills.
• Strong networking and security knowledge.
• Ability to apply secure system design tools, methods, and techniques.
• Strong interpersonal skills and team-oriented attitude.
• Coachable and able to turn feedback into results moving forward.
• Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Superior analytical and critical thinking skills.
• Understanding of how information travels.
• Familiar with incident response language.
• Well-rounded technical knowledge in Windows, Mac, Linux OS, VMware, Fortinet, SonicWALL, Palo Alto preferred.
• Strong experience with EDR/XDR technology such as Sentinel One and Crowdstrike
• Strong understanding of a range of compliance, regulatory, and legal requirements and relevant principles, best practices, and standards across multiple industries.
• Knowledge of the MITRE ATT&CK framework and Cyber Kill Chain.
• Familiarity with scripting languages such as bash, PowerShell, python, KQL.

Education/ Experience

• 5+ years of security industry experience or equivalent skill level.
• 5+ years of experience managing Active Directory and Windows Server.
• Bachelor’s degree in a relevant field is a plus but not required.
• Experience with systems administration and network infrastructure is required.
• Previously assessed, developed, and implemented, operationalized, and documented comprehensive security technologies and processes.

Certifications

• Security+, CCSP or similar desired
• (ISC)² Certified Information Systems Security Professional (CISSP) preferred

Physical Demands

Sedentary Work – Exerts up to 10 pounds of force occasionally, a negligible amount of force frequently, and/or constantly having to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time.

Disclaimer

The above information in this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.