Cybersecurity Engineer II - SIEM/EDR Automation

orionhiddencareers; Houston (TX); On-site; USD 95,000 - 125,000; Full time

Job summary

Orion is seeking a mid-level IT Cybersecurity Engineer to advance the security architecture and automation across on-prem, cloud, and hybrid environments. You will own SIEM/SOAR integrity, help tune detections, and partner with IT leadership on layered security strategies.

The role emphasizes endpoint protection, vulnerability management, and cross-training with the Infrastructure team, ensuring robust security coverage and documented operations.

Qualifications

• Bachelor's degree in a relevant field; certifications preferred (e.g., Security+/CySA+)
• 4–8 years in cybersecurity engineering or security operations
• Experience designing, tuning, or automating security tooling
• Hands-on with Defender (Endpoint, Identity, Cloud Apps, Office 365) and Darktrace

Responsibilities

• Evaluate and improve cybersecurity architecture across endpoints, network, identity, email, and cloud environments.
• Develop and maintain automation, scripts, and workflows to streamline detection, alert triage, and response.
• Own security, access control, and configuration integrity of SIEM and SOAR environments; build and maintain playbooks.

Skills

PowerShell

KQL

Automation

Security tooling

Endpoint security

NIST/CMMC awareness

Education

Bachelor's degree in Computer Science or related field

Tools

Darktrace

Microsoft Defender

SIEM

SOAR

Job description

Orion is seeking a mid-level IT Cybersecurity Engineer to advance the security architecture and automation across on-prem, cloud, and hybrid environments. You will own SIEM/SOAR integrity, help tune detections, and partner with IT leadership on layered security strategies.

The role emphasizes endpoint protection, vulnerability management, and cross-training with the Infrastructure team, ensuring robust security coverage and documented operations.