Cybersecurity Engineer

Csquare; Dallas (TX); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Csquare is seeking an experienced Cybersecurity Engineer to mature our security program across data center operations and cloud-adjacent environments. You will own security platforms (SIEM, Defender ecosystem), drive detection engineering, and lead incident response within a hybrid, colocation-focused model.

The role emphasizes ownership, depth, and practical security outcomes, with collaboration across engineering, infrastructure, and operations teams to reduce risk and improve resilience.

Qualifications

• Hands-on cybersecurity engineering and operations experience.
• Ability to design, tune, and operate security platforms across hybrid/cloud environments.
• Experience building and maintaining detections and telemetry pipelines.
• Strong collaboration with multiple IT and security teams.

Responsibilities

• Own configuration, tuning, and lifecycle of security platforms (SIEM, XDR/EDR, MDR, vulnerability mgmt).
• Engineer efficient telemetry pipelines focused on actionable signals.
• Integrate alerts across identity, endpoints, network, and cloud services.
• Customize tools for colocation environments with shared infrastructure and customer boundaries.
• Partner with stakeholders to tailor security controls for the environment.
• Design, implement, and maintain high-confidence detection logic; treat detections as code.

Skills

Networking

Windows

Linux

Identity & PAM

Detection logic

SIEM/XDR/EDR

Tools

SIEM

EDR/XDR

SOAR

Defender

MDR

Job description

We are seeking an experienced and adaptableCybersecurity Engineer to support and matureCsquare’ssecurity program. This role is hands-on and multidisciplinary, requiring close collaboration across engineering, infrastructure, and operations teams. The successful candidate will strengthen detection capabilities, optimize security platforms, and respond to incidents that span hybrid, multi-tenant, and cloud-adjacent environments.

This position offers significant influence over how security is engineered and operated within a colocation model, where uptime, customer trust, regulatory compliance, and operational discipline are paramount. The role is well-suited to an engineer who values depth, ownership, and practical security outcomes.

Key Responsibilities

Security Engineering & Platform Management

• Own the configuration, tuning, and lifecycle management of security platforms supporting corporate IT and data center operations, including SIEM, XDR/EDR, MDR, vulnerability management, and the Microsoft Defender ecosystem.
• Engineer efficient, purposeful security telemetry pipelines focused on actionable signals rather than raw log volume.
• Integrate alerts and telemetry across identity systems, endpoints, network infrastructure, virtualization platforms, and cloud services to enable cohesive visibility.
• Customize and harden security tools to reflect operational realities of colocation environments, including shared infrastructure, management networks, and customer demarcation boundaries.
• Partner with key stakeholders across the company to ensure security controls are customized for our environment.

Detection Engineering

• Design, implement, and maintain high-confidence detection logic across corporate and data center environments.
• Treat detections as code-versioned, reviewed, validated, and continuously improved
• Evaluate detection coverage with a focus on threats relevant to the business (e.g., compromised admin access, management plane abuse, insider risk, and lateral movement).
• Participate in end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident analysis.
• Investigate identity compromise, phishing, endpoint alerts, anomalous network activity, and suspicious behavior within management or control environments.
• Perform root-cause analysis and drive durable corrective actions to reduce recurrence and operational risk.

Automation & Process Improvement

• Collaborate with infrastructure, network, and operations teams to automate repetitive security and response tasks.
• Improve response workflows to balance security rigor with business needs and evolving threats.
• Reduce alert fatigue and operational noise through improved tuning, enrichment, and prioritization.

Security Posture & Internal Assessments

• Support internal security assessments, tabletop exercises, and incident simulations aligned to colocation and data center threat scenarios.
• Assist with validation of controls supporting customer assurance requirements and industry frameworks (e.g., SOC 1/2, ISO 27001).
• Contribute to continuous improvement initiatives related to system hardening, visibility, and detection capabilities.

Qualifications

Core Technical Knowledge

• Strong understanding of fundamental computing and security concepts, including:
• Networking (TCP/IP, DNS, routing, switching)
• Windows and Linux operating systems
• Identity and privileged access management
• Demonstrated ability to develop meaningful detection logic using query languages, event correlation, and behavioral analysis.
• Experience working with platforms such as SIEM, EDR/XDR, SOAR, Defender, MDR, and network security tooling, with an emphasis on engineering, tuning, and optimization.

Experience

• Prior hands-on experience in cybersecurity engineering, security operations, incident response, or threat detection.
• Comfort leading technical investigations involving critical infrastructure or administrative access.
• Experience with scripting and automation (e.g., PowerShell, Python, Bash) and integrating tools via APIs is highly desirable.

Professional Attributes

• Operational Mindset:Understands the balance between strong security controls, reliability, and customer service commitments.
• Adaptability:Comfortable operating across corporate IT, data center operations, and evolving threat scenarios.
• Analytical Curiosity:Consistently seeks root cause and systemic improvements rather than surface-level fixes.
• Ownership:Proactively identifies and resolves security gaps, particularly those affecting shared or critical infrastructure.
• Clear Communicator:Communicates security risk and findings clearly to leadership and non-security stakeholders.
• Collaborative:Works effectively with IT, network, facilities, compliance, and external partners without siloed thinking.

Csquareis an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

*** CSQUARE does not nor will not offer Sponsorship for this role. ***

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.