Cybersecurity Engineer

South Dakota Board of Regents; Indiana; On-site; USD 110,000 - 150,000; Full time

Job summary

University of South Dakota is seeking an experienced Cybersecurity Engineer to join the enterprise cybersecurity program. The role focuses on security operations, engineering, automation, and AI-enabled security to improve threat detection, investigation, and response.

The engineer will work closely with the CISO to operate and advance security capabilities, leveraging Defender XDR, Sentinel, Purview, Entra ID, and 365 within a small, high‑tech security team.

Qualifications

• Five or more years of IT or cybersecurity experience, including hands-on operations or engineering in an enterprise environment.
• Experience investigating and responding to cybersecurity incidents in an enterprise environment.
• Hands-on experience administering or operating Defender XDR or comparable EDR technologies.
• Experience with a SIEM platform to investigate events, correlate data, and analyze threats.
• Ability to independently manage technical assignments and collaborate with infra and apps teams.

Responsibilities

• Investigate and respond to security incidents using Defender XDR, Sentinel, Cisco XDR, and related technologies.
• Configure, maintain, troubleshoot, and optimize enterprise security controls across endpoints, identities, networks, cloud services, and data environments.
• Develop automated investigation and response workflows using scripting, APIs, orchestration tools, and AI-enabled security technologies.
• Develop and refine detection rules, KQL queries, alert correlations, dashboards, and investigation procedures.
• Identify, prioritize, and coordinate remediation of security vulnerabilities across enterprise systems.
• Support security controls within Entra ID, Purview, and Microsoft 365.
• Collaborate with internal IT teams and external security partners to investigate, contain, and remediate incidents.
• Identify opportunities to strengthen configurations, integrate technologies, and reduce manual effort.

Skills

Security operations

Threat hunting

Automation scripting

AI-enabled security

Incident response

Collaboration

Troubleshooting

Tools

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Purview

Microsoft Entra ID

Microsoft 365

Cisco XDR

Kusto Query Language (KQL)

PowerShell

Python

Power Automate

Logic Apps

Job description

The University of South Dakota is seeking an experienced, hands‑on Cybersecurity Engineer to join its established enterprise cybersecurity program.

This position is ideal for a cybersecurity professional who enjoys solving complex technical problems, investigating security threats, engineering security solutions, and using automation and artificial intelligence to improve security operations.

Working directly with the Chief Information Security Officer (CISO), the Cybersecurity Engineer will play an important role in operating, optimizing, and advancing the university’s cybersecurity capabilities.

USD operates a modern, integrated security environment built around Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Microsoft 365, and Cisco security technologies. The university is also advancing AI‑enabled security operations, integrating automation and intelligent security agents into threat detection, investigation, and response.

We are looking for an experienced professional who can make meaningful technical contributions from the outset, independently investigate security threats, implement security improvements, and work effectively within a small, highly technical security team.

What You’ll Do

• Security Operations: Investigate and respond to security incidents using Microsoft Defender XDR, Microsoft Sentinel, Cisco XDR, and related security technologies.
• Security Engineering: Configure, maintain, troubleshoot, and optimize enterprise security controls across endpoints, identities, networks, cloud services, and data environments.
• Automation and AI: Develop automated investigation and response workflows using scripting, APIs, orchestration tools, and emerging AI‑enabled security technologies.
• Threat Detection and Hunting: Develop and refine detection rules, KQL queries, alert correlations, dashboards, and investigation procedures.
• Vulnerability Management: Identify, prioritize, and coordinate the remediation of security vulnerabilities across enterprise systems.
• Identity and Data Protection: Support technical security controls within Microsoft Entra ID, Microsoft Purview, and Microsoft 365.
• Incident Response: Work with internal IT teams and external security partners to investigate, contain, and remediate cybersecurity incidents.
• Continuous Improvement: Identify opportunities to strengthen existing security configurations, integrate technologies, and reduce manual operational effort.

What We’re Looking For

We are seeking an experienced engineer who has already worked directly with enterprise security technologies and can independently execute technical security responsibilities.

Required Qualifications

• Five or more years of relevant professional IT or cybersecurity experience, including at least three years in hands-on cybersecurity operations or engineering.
• Practical experience investigating and responding to cybersecurity incidents in an enterprise environment.
• Hands‑on experience administering or operating Microsoft Defender XDR or comparable enterprise endpoint detection and response technologies.
• Experience using a SIEM platform to investigate security events, correlate data, and analyze threats.
• Demonstrated ability to investigate technical security problems and implement effective remediation.
• Experience with vulnerability management and risk‑based remediation.
• Working knowledge of security scripting, APIs, or automation technologies.
• Ability to independently manage technical assignments, troubleshoot security issues, and collaborate with infrastructure and application teams.

Preferred Qualifications

• Hands‑on experience with Microsoft Defender XDR, Microsoft Sentinel, and Kusto Query Language (KQL).
• Experience with Microsoft Purview, Entra ID, Conditional Access, and Microsoft 365 security.
• Experience with Cisco Secure Access, Cisco XDR, or related Cisco security platforms.
• Experience using PowerShell, Python, Power Automate, Logic Apps, or security orchestration technologies.
• Familiarity with AI‑enabled cybersecurity tools, Microsoft Security Copilot, Copilot Studio, or agent‑based security automation.
• Experience integrating multiple security technologies through APIs or automated workflows.
• Experience working with managed detection and response providers.
• Certifications such as Microsoft SC-200, Security+, CySA+, CISSP, or equivalent.

Why Join USD Cybersecurity?

Work with modern technology. Gain extensive hands‑on experience with integrated Microsoft and Cisco security platforms, security automation, and emerging AI‑driven security operations.

Make a direct impact. Work within a small security team where your expertise and technical contributions directly influence the institution’s security posture.

Engineer solutions, not just tickets. Take ownership of technical investigations, security improvements, automation, and operational engineering.

Work directly with security leadership. Collaborate closely with the CISO on priorities, technical solutions, and continuous security improvement.

Be part of an evolving security operation. Help advance an established cybersecurity program that is actively incorporating automation, AI‑assisted investigations, and intelligent security agents.

The University of South Dakota offers a collaborative higher education environment and an opportunity to apply advanced cybersecurity skills in support of education, research, and public service.

The position may require occasional after–hours work and participation in an on‑call rotation. Must be authorized to work in the U.S. Sponsorship is not available for this position

Posting Date

Posting Date 10/20/2026

Closing Date

Open Until Filled Yes

First Consideration Date

First Consideration Date 11/03/2026

Advertised Salary

Advertised Salary commensurate with qualifications

Duration of the Term

Duration of the Term 12 months

Appointment Percent

Appointment Percent 100

Work Hours

Normal business hours with frequent on call duties

Typical Hours Worked Per Week

Appointment Type

Appointment Type Regular

Scope of Search

Scope of Search External (includes Internal)

If internal, define scope of search

This position requires

This position requires No Requirement

If other, please indicate

Department Description and Cultural Expectations

Equal Employment Opportunity Statement

USD is committed to fostering a dynamic and welcoming working and learning environment for all. USD provides equal employment opportunities to all employees and applicants for employment without regard to ideological, political, or sectarian opinions or perspectives; or race, color, creed, religion, sex, ancestry, disability, national origin or any other factor protected by applicable federal, state, or local laws. USD is committed to the principles of free expression and encourages the timely and rational discussion of topics in an environment that is intellectually and ideologically diverse.

Contact Information

Working Conditions

Cognitive Requirements

Please check the appropriate response that describe the cognitive requirements for this position.

Protective Clothing/Equipment

Please check the appropriate response for this position's use of the following protective clothing or equipment.

If other protection is used please identify

Physical Requirements

Please designate the physical requirements of this position

Please designate the physical requirements of this position Fine Finger Manipulation (keyboarding, pipefitting, bench work, etc), Repetitive Motion, Use Both Hands, Walking

Describe any of the conditions selected

Sensory Requirements

Please check the appropriate response that describe the sensory requirements for this position.

Please check the appropriate response that describe the sensory requirements for this position. Hearing, Speaking, Vision (With and without corrective lenses)

Working Conditions & Exposures

Working Conditions or Exposures (or potential exposures) that this position may encounter during the course of the work day.

Please describe, in more detail, any of the conditions checked above

Check the appropriate box(es) that best describes the environment in which the primary function of the position is performed.

If you have indicated Other Environment, if work tasks involve one or more of the above, or if further explanation is necessary, please use the space provided.

Supplemental Questions

Required fields are indicated with an asterisk (*).

Documents Needed to Apply

Required Documents

• Resume
• Cover Letter
• Other

Optional Documents

• Reference List

The South Dakota Board of Regents is an Equal Opportunity Employer. The Board of Regents will take Affirmative Action to ensure that all employment practices are free of discrimination. In addition, the Board of Regents fully supports incorporation of non-discrimination and Affirmative Action rules and regulations into all of its employment practices. Arrangements for accommodations required by disabilities can be made by contacting the appropriate Human Resources office. Please see the Contact Us section of this webpage for more information.

Notice to all applicants: If you are selected as a finalist, job references and a background check may be conducted.

South Dakota Board of Regents

306 E. Capital Ave, Suite 200

Pierre, SD 57501

605-773-3455