Cybersecurity Engineer: AI-Driven Security Operations

South Dakota Board of Regents; Indiana; Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

University of South Dakota is seeking an experienced Cybersecurity Engineer to join the enterprise cybersecurity program. The role focuses on security operations, engineering, automation, and AI-enabled security to improve threat detection, investigation, and response.

The engineer will work closely with the CISO to operate and advance security capabilities, leveraging Defender XDR, Sentinel, Purview, Entra ID, and 365 within a small, high‑tech security team.

Formación

• Five or more years of IT or cybersecurity experience, including hands-on operations or engineering in an enterprise environment.
• Experience investigating and responding to cybersecurity incidents in an enterprise environment.
• Hands-on experience administering or operating Defender XDR or comparable EDR technologies.
• Experience with a SIEM platform to investigate events, correlate data, and analyze threats.
• Ability to independently manage technical assignments and collaborate with infra and apps teams.

Responsabilidades

• Investigate and respond to security incidents using Defender XDR, Sentinel, Cisco XDR, and related technologies.
• Configure, maintain, troubleshoot, and optimize enterprise security controls across endpoints, identities, networks, cloud services, and data environments.
• Develop automated investigation and response workflows using scripting, APIs, orchestration tools, and AI-enabled security technologies.
• Develop and refine detection rules, KQL queries, alert correlations, dashboards, and investigation procedures.
• Identify, prioritize, and coordinate remediation of security vulnerabilities across enterprise systems.
• Support security controls within Entra ID, Purview, and Microsoft 365.
• Collaborate with internal IT teams and external security partners to investigate, contain, and remediate incidents.
• Identify opportunities to strengthen configurations, integrate technologies, and reduce manual effort.

Conocimientos

Security operations

Threat hunting

Automation scripting

AI-enabled security

Incident response

Collaboration

Troubleshooting

Herramientas

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Purview

Microsoft Entra ID

Microsoft 365

Cisco XDR

Kusto Query Language (KQL)

PowerShell

Python

Power Automate

Logic Apps

Descripción del empleo

University of South Dakota is seeking an experienced Cybersecurity Engineer to join the enterprise cybersecurity program. The role focuses on security operations, engineering, automation, and AI-enabled security to improve threat detection, investigation, and response.

The engineer will work closely with the CISO to operate and advance security capabilities, leveraging Defender XDR, Sentinel, Purview, Entra ID, and 365 within a small, high‑tech security team.