Cybersecurity Engineer II: SIEM, SOAR & Automation Lead

Orion Marine Group; Houston (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Orion Marine Group seeks an IT Cybersecurity Engineer II to support architecture, operation, automation, and continuous improvement of cybersecurity posture across on-premises, cloud, and hybrid environments. You will own SIEM/SOAR security, endpoint protection, and cross-train with Infrastructure teams to ensure a secure, resilient tech environment.

Responsibilities include tuning detections, building automation, and supporting NIST/CMMC compliance efforts, with collaboration across IT

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.
• Experience designing, tuning, or automating security tooling is preferred.
• Hands-on experience with Defender suite and Darktrace is expected.

Responsibilities

• Evaluate Orion's cybersecurity architecture and posture, identifying gaps and improvements.
• Develop and maintain automation to streamline detection, alert triage, and response actions.
• Own the security and configuration integrity of SIEM and SOAR environments.
• Monitor endpoint security coverage, policy compliance, and vulnerability management workflows.
• Provide backup coverage for core infrastructure operations and coordinate security implications with IT teams.
• Support compliance activities including CMMC and NIST SP 800-171.

Skills

Strong communication

Analytical skills

Problem-solving

Documentation habits

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

Microsoft Defender suite

Darktrace

SIEM/SOAR platforms

VMware

Veeam

Job description

Orion Marine Group seeks an IT Cybersecurity Engineer II to support architecture, operation, automation, and continuous improvement of cybersecurity posture across on-premises, cloud, and hybrid environments. You will own SIEM/SOAR security, endpoint protection, and cross-train with Infrastructure teams to ensure a secure, resilient tech environment.

Responsibilities include tuning detections, building automation, and supporting NIST/CMMC compliance efforts, with collaboration across IT