Cybersecurity Engineer II: SIEM, SOAR & Automation

Cybersecurity Jobs; Houston (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Orion Marine Group is seeking an IT Cybersecurity Engineer II to support architecture, operation, automation, and continuous improvement of security across on-prem, cloud, and hybrid environments. The role is onsite in Houston, TX, with responsibilities spanning threat detection, automation, and incident response.

Ideal candidates have 4–8 years of hands-on cybersecurity experience, strong knowledge of Defender and Darktrace, and the ability to translate findings into remediation plans with

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 4-8 years of hands-on cybersecurity engineering or security operations experience.
• Hands-on experience with Microsoft Defender (Endpoint, Identity, Cloud Apps, Office 365) and Darktrace.

Responsibilities

• Assess Orion’s cybersecurity architecture and posture, identify gaps, and recommend improvements using security best practices and frameworks (NIST, CIS Controls, Zero Trust).
• Collaborate to design, evolve, and maintain layered security architecture across endpoints, networks, identity, email, and cloud environments based on testing and audits.
• Convert findings into prioritized remediation plans and architectural changes; track progress through implementation and closure.
• Own security tooling (SIEM/SOAR) enhancements, tuning, and automation to harden detection, response, and reporting.
• Create and maintain automation scripts/workflows (PowerShell, KQL, Logic Apps/Sentinel) to streamline detection and response.
• Monitor and tune detection rules, alert thresholds, and correlation logic to reduce false positives.
• Evaluate emerging security tools and capabilities and recommend enhancements to the security stack.
• Monitor SIEM/SOAR health, log ingestion, playbook execution, and incident coverage.
• Provide endpoint security administration across Orion locations, devices, and business units; manage policies and vulnerability workflows.
• Support incident response activities and post-incident analysis; coordinate containment and remediation.
• Participate in CMMC and NIST SP 800-171 compliance activities; collect evidence and support audits.
• Maintain security documentation, runbooks, and change records for auditability.
• Cross-train with Infrastructure on VMware and Veeam; provide backup coverage as needed.
• Maintain accurate communications and handoffs with stakeholders for incidents and projects.

Skills

Security architecture

Threat detection

Automation

Incident response

Communication

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

Darktrace

Microsoft Defender

Job description

Orion Marine Group is seeking an IT Cybersecurity Engineer II to support architecture, operation, automation, and continuous improvement of security across on-prem, cloud, and hybrid environments. The role is onsite in Houston, TX, with responsibilities spanning threat detection, automation, and incident response.

Ideal candidates have 4–8 years of hands-on cybersecurity experience, strong knowledge of Defender and Darktrace, and the ability to translate findings into remediation plans with