Cybersecurity Engineer - AI-Driven Security Ops

The University of South Dakota Knudson School of Law; Vermillion (SD); On-site; USD 100,000 - 140,000; Full time

Job summary

The University of South Dakota is seeking an experienced Cybersecurity Engineer to join its enterprise security program in Vermillion. You will engage in security operations, engineering, and automation to protect university systems and data.

Reporting to the CISO, you will develop and optimize defenses, craft automated workflows, and coordinate remediation across endpoints, identities, networks, and cloud services.

Qualifications

• Five or more years of IT or cybersecurity experience, with at least three years in hands-on operational work.
• Practical experience investigating and responding to incidents in an enterprise environment.
• Hands-on experience with Defender XDR or comparable EDR tech.
• Experience using a SIEM to investigate events, correlate data, and analyze threats.
• Ability to investigate technical security problems and implement remediation.
• Experience with vulnerability management and risk-based remediation.
• Knowledge of security scripting, APIs, or automation technologies.

Responsibilities

• Security Operations: Investigate and respond to incidents using Defender XDR, Sentinel, Cisco XDR, and related tech.
• Security Engineering: Configure and optimize enterprise security controls across endpoints, identities, networks, cloud, and data.
• Automation and AI: Develop automated investigation and response workflows with scripting and APIs.
• Threat Detection and Hunting: Develop detection rules, KQL queries, alert correlations, dashboards, and procedures.
• Vulnerability Management: Identify, prioritize, and coordinate remediation across enterprise systems.
• Identity and Data Protection: Support security controls with Entra ID, Purview, and M365.
• Incident Response: Work with IT and partners to investigate, contain, and remediate incidents.
• Continuous Improvement: Strengthen configurations, integrate tech, and reduce manual effort.

Skills

Cybersecurity operations

Incident response

Automation scripting

Threat hunting

Security engineering

Tools

Microsoft Defender XDR

Microsoft Sentinel

KQL

PowerShell

Python

Job description

The University of South Dakota is seeking an experienced Cybersecurity Engineer to join its enterprise security program in Vermillion. You will engage in security operations, engineering, and automation to protect university systems and data.

Reporting to the CISO, you will develop and optimize defenses, craft automated workflows, and coordinate remediation across endpoints, identities, networks, and cloud services.