Hybrid Cybersecurity Engineer: Vulnerability & IAM

Sourceability; Austin (TX); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Training & development

Collaborative environment

Paid time off

Job summary

Sourceability is building a Global Engineering Organization and seeks a Cybersecurity Engineer to implement, monitor, and improve security controls across our systems, endpoints, cloud services, and CI/CD pipelines in a hybrid Austin, TX environment.

You will partner with DevOps, Software Engineering, and SysOps teams to reduce risk through vulnerability management, IAM, incident response, and secure configuration, helping Sourceability maintain a practical security posture.

Qualifications

• 3+ years of experience in cybersecurity, information security, security engineering, infrastructure security, or similar hands-on roles.
• Practical understanding of cybersecurity principles, vulnerability management, incident response, access control, endpoint security, network security, and secure system configuration.
• Hands-on experience with security tooling such as EDR / endpoint protection, SIEM or log management, vulnerability scanners, identity platforms, firewall / VPN tools, or cloud security tools.
• Working knowledge of Windows and Linux server security, patching, hardening, logging, and operational troubleshooting.
• Understanding of network security concepts including firewalls, VPN, DNS, IDS / IPS, segmentation, remote access, and zero trust principles.
• Experience supporting identity and access management practices, including MFA, least privilege, privileged access, role-based access control, and access reviews.
• Ability to investigate security alerts, analyze logs, validate vulnerabilities, document findings, and follow issues through remediation.
• Understanding of application security concepts, secure SDLC, dependency scanning, secrets management, SAST / DAST concepts, and DevSecOps practices.
• Ability to work with infrastructure, DevOps, software engineering, DBA, and business teams to implement security controls without unnecessarily blocking delivery.
• Strong written communication skills and ability to create clear documentation, runbooks, remediation notes, and risk summaries.
• High ownership mindset, structured troubleshooting approach, and ability to operate in a distributed, multi-timezone environment.

Responsibilities

• Implement, maintain, and improve practical security controls across servers, endpoints, cloud services, network infrastructure, identity systems, and engineering platforms.
• Monitor security alerts and events from endpoint protection, SIEM / logging tools, vulnerability scanners, identity systems, firewalls, VPNs, and other security platforms.
• Triage security alerts, investigate suspicious activity, document findings, and elevate incidents through the agreed incident response process.
• Support security incident response activities, including evidence collection, containment support, remediation tracking, and post-incident improvement actions.
• Partner with Infrastructure / SysOps teams on server hardening, patching, configuration baselines, backup security, firewall rules, VPN access, and network segmentation.
• Partner with DevOps and Software Engineering teams to embed security into CI/CD, code repositories, dependency management, secrets handling, release readiness, and application security checks.
• Support identity and access management controls, including least privilege, role-based access, privileged account review, MFA, access reviews, and joiner / mover / leaver process improvements.
• Assist with endpoint, server, and cloud security tooling, including policy configuration, alert tuning, remediation follow-up, and operational documentation.
• Support security reviews for new systems, integrations, infrastructure changes, vendor tools, and production-impacting technology decisions.
• Help maintain security policies, standards, procedures, runbooks, and technical documentation in a practical and usable format.
• Support compliance and audit activities by collecting evidence, documenting controls, and tracking remediation items, without becoming the sole owner of compliance programs.
• Communicate security risks clearly to technical and non-technical stakeholders, including impact, priority, recommended actions, and remediation status.
• Contribute to security awareness by helping teams understand practical security expectations and common risk areas.

Skills

Vulnerability management

Incident response

Endpoint security

Network security

DevSecOps

Identity access management

Security tooling

Tools

EDR

SIEM

Vulnerability scanners

Cloud security tools

Firewall / VPN tools

Identity platforms

Job description

Sourceability is building a Global Engineering Organization and seeks a Cybersecurity Engineer to implement, monitor, and improve security controls across our systems, endpoints, cloud services, and CI/CD pipelines in a hybrid Austin, TX environment.

You will partner with DevOps, Software Engineering, and SysOps teams to reduce risk through vulnerability management, IAM, incident response, and secure configuration, helping Sourceability maintain a practical security posture.