Cybersecurity Engineer: Threat Detection & Cloud Security

CBRE; Dallas (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

CBRE is seeking a Cybersecurity Engineer to deploy, operate and tune security controls across endpoints, email security, web proxies, and cloud platforms in a large, global environment. You will work with SIEM and data pipelines to detect threats and investigate incidents, while collaborating with cross-functional teams to implement hardening measures and maintain runbooks.

The role emphasizes hands-on security engineering with opportunities to grow into senior competencies, across MITRE ATT&CK

Qualifications

• Three+ years in information security or related field.
• Hands-on security engineering or SOC experience.
• Experience with at least two security tech areas (EDR, gateways, firewalls, proxies, cloud logging).
• Familiarity with MITRE ATT&CK framework and identity-based attacks.
• SQL and Python for log analysis and automation.
• Clear written communication.

Responsibilities

• Deploy, configure and maintain security controls across endpoints, email, web proxy, firewall and cloud platforms.
• Monitor and onboard log sources; troubleshoot ingestion and schema issues.
• Support MITRE ATT&CK assessments by documenting log source coverage.
• Build and tune detections in SIEM and data pipelines.
• Investigate suspicious activity and document findings for incidents.
• Run IOC searches across networks, identity, cloud and email logs.
• Write scripts and integrations to automate tasks.
• Collaborate with network and cloud teams to implement hardening changes.
• Track vulnerability and threat intel; translate into patch/detection priorities.
• Maintain runbooks and investigation notes.
• Participate in on-call rotations.

Skills

EDR platforms

Email security

Next-gen firewalls

Web proxies

Cloud logging

Azure AD / Entra

SIEM

Python scripting

SQL

Investigation skills

Tools

Databahn

Cribl

SOAR tooling

CrowdStrike Falcon

Job description

CBRE is seeking a Cybersecurity Engineer to deploy, operate and tune security controls across endpoints, email security, web proxies, and cloud platforms in a large, global environment. You will work with SIEM and data pipelines to detect threats and investigate incidents, while collaborating with cross-functional teams to implement hardening measures and maintain runbooks.

The role emphasizes hands-on security engineering with opportunities to grow into senior competencies, across MITRE ATT&CK