Cybersecurity Engineer & Architect (On-Prem to Cloud)

Koitecc Solutions; New York (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

MetTel is seeking a Cybersecurity Engineer to architect and operate enterprise security platforms in NYC/NJ. You will build and run on‑prem and cloud security solutions, write detection logic, create dashboards, and develop SOAR playbooks, while leading incident response and threat hunting.

The role spans design, deployment, and ongoing protection of critical environments. Ideal candidates have hands-on experience with CyberArk, Splunk, Tenable, and SOAR, plus strong Linux/Windows admin skills

Qualifications

• 4+ years securing enterprise environments with hands-on time building and using security platforms
• Deep proficiency in at least two of CyberArk, Splunk, Tenable, or SOAR platforms
• Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation
• Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center)
• End-to-end ownership: design, deploy, and defend security infrastructure

Responsibilities

• Architect and implement on-prem and cloud security platforms: CyberArk PAS, Splunk, Tenable, SOAR, OKTA/SAML
• Design for scale: RBAC, AD integration, and cross-team coordination
• Operate dashboards, detection rules, and automated playbooks
• Own incident response and threat hunting using your tools
• Support compliance (SOC 2, PCI DSS, NIST 800-53) with audit trails and reporting

Skills

Linux administration

Windows administration

Python scripting

PowerShell scripting

Cloud security

Incident response

Threat hunting

Tools

CyberArk

Splunk

Tenable

SOAR

OKTA/SAML

Job description

MetTel is seeking a Cybersecurity Engineer to architect and operate enterprise security platforms in NYC/NJ. You will build and run on‑prem and cloud security solutions, write detection logic, create dashboards, and develop SOAR playbooks, while leading incident response and threat hunting.

The role spans design, deployment, and ongoing protection of critical environments. Ideal candidates have hands-on experience with CyberArk, Splunk, Tenable, and SOAR, plus strong Linux/Windows admin skills