Cybersecurity Engineer

Koitecc Solutions; New York (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

MetTel is seeking a Cybersecurity Engineer to architect and operate enterprise security platforms in NYC/NJ. You will build and run on‑prem and cloud security solutions, write detection logic, create dashboards, and develop SOAR playbooks, while leading incident response and threat hunting.

The role spans design, deployment, and ongoing protection of critical environments. Ideal candidates have hands-on experience with CyberArk, Splunk, Tenable, and SOAR, plus strong Linux/Windows admin skills

Qualifications

• 4+ years securing enterprise environments with hands-on time building and using security platforms
• Deep proficiency in at least two of CyberArk, Splunk, Tenable, or SOAR platforms
• Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation
• Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center)
• End-to-end ownership: design, deploy, and defend security infrastructure

Responsibilities

• Architect and implement on-prem and cloud security platforms: CyberArk PAS, Splunk, Tenable, SOAR, OKTA/SAML
• Design for scale: RBAC, AD integration, and cross-team coordination
• Operate dashboards, detection rules, and automated playbooks
• Own incident response and threat hunting using your tools
• Support compliance (SOC 2, PCI DSS, NIST 800-53) with audit trails and reporting

Skills

Linux administration

Windows administration

Python scripting

PowerShell scripting

Cloud security

Incident response

Threat hunting

Tools

CyberArk

Splunk

Tenable

SOAR

OKTA/SAML

Job description

MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives.

We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career.

We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC / NJ!

ROLE:

We're looking for a Cybersecurity Engineer (not an Analyst) who can both build our security infrastructure and operate it day-to-day. This isn't a pure admin role or a pure analyst role — it's both. You'll architect and install enterprise-grade, on-prem security platforms for dual-datacenter active/active deployments. You'll then turn around and use those same tools operationally — writing detection logic, creating dashboards, building SOAR playbooks, and triaging what you built.

RESPONSIBILITIES:

• Architect and implement enterprise security platforms on-prem and in the cloud: CyberArk PAS (Vault, CPM, PSM, PVWA), Splunk Enterprise/ES (indexers, search heads, clustering, HA/DR), Tenable, SOAR, OKTA/SAML
• Design for scale: capacity planning, redundancy, role‑based access control, and integration with AD, applications, and infrastructure
• Then operate what you build: custom dashboards, correlation rules, detection tuning, automated playbooks
• Own incident response and threat hunting using your own tooling — you're the analyst, not just the platform owner
• Support compliance (SOC 2, PCI DSS, NIST 800-53) with the audit trails and reporting your architecture produces

DESIRED QUALIFICATIONS:

• 4+ years securing enterprise environments, with real hands‑on time both building (installs, architecture, HA/DR design) and using (detection, dashboards, response) security platforms — not just one or the other
• Deep proficiency in at least two of: CyberArk, Splunk Enterprise/ES, Tenable, SOAR (Phantom/Demisto/Resilient)
• Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation and integrations
• Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center)
• Comfortable owning something end‑to‑end: design it, deploy it, defend with it
• Bonus: offensive security background (Nmap, Burp, Metasploit, pentest/ethical hacking experience) — not required, but a strong plus given the red team opportunity above

ADDITIONAL SKILLS - NICE TO HAVE:

• CISSP
• GCIH
• CEH,
• CySA+, or vendor certs (CyberArk Defender/Sentry, Splunk Certified Admin/Architect)