Security Engineer

Shermco Industries; United States; Hybrid; USD 120,000 - 170,000; Full time

Job summary

Shermco Industries in Irving, TX is seeking a hands-on Security Engineer to own day-to-day SOC workflows, threat management, and core security infrastructure. You will lead incident monitoring, detection, and response across network, endpoints, and email environments, with strong emphasis on Palo Alto networks and EDR/XDR platforms.

The role uses AI-assisted security tools and automation to improve threat analysis, accelerate investigations, and streamline repetitive tasks, while maintaining

Qualifications

• 4–7+ years hands-on cybersecurity or security operations experience.
• Deep knowledge of TCP/IP, DNS, AD, and MITRE ATT&CK framework.
• Experience configuring Palo Alto firewalls and Panorama.

Responsibilities

• Lead daily SOC monitoring, alert triage, log analysis, and incident investigations.
• Drive incident response from detection through remediation and post-incident reporting.
• Manage Palo Alto firewalls, SSL decryption, App-ID/User-ID configurations, and threat prevention features.
• Oversee email security gateway configurations and defend against phishing and BEC.
• Refine SIEM/XDR alert rules and automate incident response playbooks.

Skills

Incident response

Threat hunting

Log analysis

Troubleshooting

Communication

Calm under pressure

Education

Bachelor's degree in Cybersecurity or related field

PCNSE Certification

Tools

Palo Alto firewalls

Panorama

EDR/XDR platforms

Email gateway platforms (Proofpoint, Mimecast, Defender for Office 365, Abnormal)

Job description

Location: On-site / Hybrid, Irving, Texas

Work Authorization Requirement:

Candidates must be legally authorized to work in the United States without current or future employer sponsorship. Shermco does not provide visa sponsorship for this position.

Position Summary

We are seeking a hands-on, highly skilled Security Engineer to own day-to-day Security Operations Center (SOC) workflows, threat management, and core security infrastructure. In this role, you will take full operational ownership of incident monitoring, detection, and response across our network, endpoints, and email environments. The ideal candidate brings strong expertise in Palo Alto Networks infrastructure, deep operational experience with EDR/XDR platforms, and proven capability in mitigating email-borne threats. This role will also leverage AI-assisted security tools and automation to improve threat analysis, accelerate investigations, streamline repetitive tasks, and enhance overall SOC efficiency.

Key Responsibilities

• SOC Ownership & Incident Response: Lead daily SOC monitoring, alert triage, log analysis, and incident investigations. Drive incident response from initial detection through root-cause remediation and post-incident reporting.
• Network & Perimeter Security: Manage, tune, and maintain Palo Alto firewalls, security policies, SSL decryption, App-ID/User-ID configurations, and threat prevention features.
• Endpoint Protection (EDR/XDR): Own deployment, agent health, policy tuning, and threat hunting across our EDR platform to protect all enterprise endpoints.
• Email Security: Oversee email security gateway solutions, defending against phishing, Business Email Compromise (BEC), account takeover attempts, and malicious attachments/URLs.
• Detection Engineering & Tuning: Continuously refine SIEM/XDR alert rules, reduce false positives, and automate manual incident response playbooks.
• Vulnerability & Threat Management: Conduct recurring vulnerability scans, prioritize patching with IT operations, and assess emerging threat intelligence for risks to the environment.
• Process & Documentation: Maintain incident response runbooks, threat models, architectural diagrams, and operational procedures to ensure continuous coverage.

Qualifications & Requirements

• Experience: 4–7+ years of dedicated hands-on experience in cybersecurity, security operations, or threat engineering.
• Palo Alto Expertise: Strong experience configuring, administering, and troubleshooting Palo Alto Networks firewalls and Panorama. PCNSE certification is a strong plus.
• EDR/XDR Mastery: Direct experience managing enterprise EDR platforms (e.g., Palo Alto Cortex XDR, CrowdStrike, Defender for Endpoint, SentinelOne).
• Email Gateway Management: Proven experience configuring and tuning advanced email security platforms (e.g., Proofpoint, Mimecast, Defender for Office 365, Abnormal).
• Technical Depth: Deep understanding of TCP/IP, OSI model, DNS, active directory/identity access concepts, and common attack vectors (MITRE ATT&CK framework).
• Soft Skills: Calm under pressure during active incidents, strong technical troubleshooting abilities, and clear communication skills when reporting risks to IT leadership.

Preferred Certifications

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• GIAC Certifications (GCIH, GCFA, or GCDA)