Infrastructure Engineer, Senior

Southland Industries; Carrollton (TX); On-site; USD 91,000 - 156,000; Full time

Benefits offered by this job

401(k) matching

Medical, dental, and vision insurance

Annual bonus program

Life insurance

Disability income protection

Flexible spending plans

Paid parental leave

Paid holidays and vacation

Professional development

Wellness benefits

Job summary

Southland Industries is seeking a Senior Infrastructure Engineer to join Security Operations, supporting monitoring, incident response, and vulnerability management across users, endpoints, servers, cloud services, and business systems.

You will investigate alerts, coordinate with IT and business teams, help improve workflows, and document actions to ensure timely remediation and measurable security improvements. This is a hands-on role in a fast-paced, employee-owned environment.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field is preferred.
• Minimum 4–6 years of experience in cybersecurity, security operations, incident response, IT operations, networking, or related role.
• Experience with EDR, SIEM, email security, identity security, vulnerability management, ITSM, or similar tools.
• Strong hands-on security operations, incident response, threat detection, or vulnerability experience.

Responsibilities

• Build strong working relationships with cybersecurity, IT operations, infrastructure, support, vendors, and business teams.
• Investigate alerts from EDR, SIEM, email, identity, vulnerability, cloud, and endpoint tools.
• Support incident response activities, including scoping, containment, remediation, and recovery follow-up.
• Use security operations tools such as EDR, SIEM, email security, identity security, vulnerability management, and ITSM platforms.
• Document investigations, incident notes, playbooks, runbooks, escalation paths, and decision points.

Skills

Security operations

Incident response

Threat detection

Vulnerability management

IT operations

Communication

Education

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field

Tools

EDR

SIEM

Email security

Identity security

Vulnerability management tools

ITSM platforms

Job description

Position Summary

Security Operations is a key part of Southland’s cybersecurity program, supporting the monitoring, response, tooling, workflows, and coordination that help protect the company from cyber threats. This role helps improve how Southland detects issues, responds to incidents, manages operational risk, and keeps security work moving across users, endpoints, servers, cloud services, and business systems.

As an Infrastructure Engineer, Senior, you will work with cybersecurity, IT, infrastructure, support, vendors, and business teams to investigate alerts, respond to incidents, follow up on vulnerabilities, and improve operational workflows. This role is hands-on and helps turn security events into clear action, documentation, and remediation.

Position Details

Relationship Building/Management

• Build strong working relationships with cybersecurity, IT operations, infrastructure, support, vendors, and business teams.
• Serve as a hands-on resource for operations questions, escalations, incidents, and follow-up work.
• Work with technical owners so investigation steps, impact, and next actions are clear.
• Build trust by communicating clearly, following through, and staying close to the work.

Monitoring and Triage

• Investigate alerts from EDR, SIEM, email, identity, vulnerability, cloud, and endpoint tools.
• Review alert details, logs, user activity, endpoint data, and related context to determine risk.
• Escalate issues clearly when an incident, containment action, or business decision is needed.
• Document findings, decisions, and next steps so work can be tracked and reviewed.

Incident and Vulnerability Response

• Support incident response activities, including scoping, containment, remediation, and recovery follow-up.
• Coordinate with IT, support, infrastructure, and business owners during response and remediation work.
• Follow up on vulnerabilities, misconfigurations, exposure, and operational findings through closure.
• Help reduce disruption by keeping response work organized, practical, and timely.

Technology and Tool Support

• Use security operations tools such as EDR, SIEM, email security, identity security, vulnerability management, and ITSM platforms.
• Support tuning, automation, dashboards, playbooks, and data quality improvements.
• Help connect alerts, tickets, evidence, ownership, and remediation status across tools.
• Improve visibility, alert quality, response speed, and reduction of manual work.

Change Management

• Support rollout of new security tools, monitoring practices, response processes, and operational standards.
• Help analysts, engineers, support teams, and stakeholders understand what is changing.
• Listen to feedback, identify issues early, and recommend practical adjustments.
• Support testing, training, and readiness before new tools or processes go live.

Support and Documentation

• Document investigations, incident notes, playbooks, runbooks, escalation paths, and decision points.
• Maintain accurate operational data in dashboards, tickets, alerts, and response records.
• Provide day-to-day guidance on triage, response, vulnerabilities, and operations questions.
• Share knowledge with peers and help keep procedures and handoffs consistent.

Continuous Improvement

• Identify patterns in alerts, vulnerabilities, incidents, and repeated operational issues.
• Recommend practical improvements to detections, playbooks, dashboards, automation, and workflows.
• Support planning for operations maturity, MSSP/vendor coordination, tooling, and automation.
• Keep up with relevant threat, detection, response, and vulnerability management practices.

Qualifications

• Strong hands-on security operations, incident response, threat detection, or vulnerability experience.
• Experience with EDR, SIEM, email security, identity security, vulnerability management, ITSM, or similar tools.
• Solid understanding of alert triage, endpoint security, identity risk, cloud security, and response workflows.
• Experience supporting investigations, incidents, vulnerabilities, tool tuning, or process improvement.
• Ability to work well with both business stakeholders and technical teams.
• Strong communication skills and a practical, straightforward approach.
• Ability to sort through technical issues, make sound recommendations, and keep work moving.
• Experience with MSSP coordination, incident playbooks, SIEM tuning, or automation is preferred.
• Interest in tools that improve visibility, automation, reporting, and day-to-day execution.
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field is preferred.
• Minimum 4 – 6 years of experience in cybersecurity, security operations, incident response, IT operations, networking, or related role.

Benefits

As a 100% employee-owned company, we offer a comprehensive benefits package for you and your family:

• 401(k) plan with 50% company match (no cap) and immediate 100% vesting
• Medical, dental, and vision insurance (100% paid for employee)
• Annual bonus program based upon performance, achievement, and company profitability
• Term life, AD&D insurance, and voluntary life insurance
• Disability income protection insurance
• Pre-tax flexible spending plans (health and dependent care)
• Paid parental leave
• Paid holidays, vacation, and personal time
• Training/professional development opportunities and company-paid memberships for professional associations and licenses
• Wellness benefits

About Southland Industries

As one of the nation’s largest MEP companies, Southland Industries is built on the foundation of great people. Since 1949, we have put our people first, enabling growth, professional achievement, and innovation. If you want to join a fast-paced environment where you’re engaged, challenged, and valued, apply now to join our dynamic team.

To learn more about careers at Southland, explore our career opportunities, follow us on social media, and check out our website.

Southland Industries and all its subsidiaries are anEqual Opportunity Employerand prohibits discrimination and harassment of any kind. We are committed to the principle of equal employment opportunity for all employees and to providing our employees with a safe work environment free of discrimination and harassment.All employment decisions at Southland Industries are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, gender, national origin, ancestry, age, disability, medical condition, marital status, family care or medical leave status, veteran status, or any other status protected by the laws or regulations in the locations where we operate. Southland Industries will not tolerate discrimination or harassment based on any of these characteristics.

Pay:Final pay is determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data. For (Colorado/New York City/California/Washington/Maryland/Virginia/DC) this ranges from $91,300.00 - $156,121.00 plus annual incentive, benefits, and retirement program as outlined above.

Contingent Employment:All employment offers are contingent upon successful drug tests, background checks, and professional reference checks. Roles that include driving as an essential job duty will be required to have a successful Motor Vehicle Record check (MVR). We are not able to offer sponsorship of employment at this time.

External Agency Announcement: Its Southland Industries' policy not to accept candidate submissions from recruiting agencies without an active and authorized work order. Candidate ownership can only be establishedafter a bona fide work order is issued by a member of the Southland Industries Talent Acquisition team and the candidate is appropriately submitted through our Applicant Tracking System (ATS).