Security Engineer | Cloud, SIEM & Automation

ECS Corporate Services; Portland (OR); Híbrido; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Everforth ECS in Portland, OR (Hybrid) seeks a Security Engineer to advance an Information Security Continuous Monitoring program for a federal client. You will translate complex security requirements into practical controls and drive continuous visibility across enterprise systems.

The role emphasizes SIEM engineering, log pipelines, dashboards, and vulnerability management using CAASM tooling (Axonius) to close asset visibility gaps.

Formación

• Minimum five years of experience in security engineering or closely related technical security roles.
• Strong expertise with Linux and Windows operating systems, networking concepts and protocols, and common enterprise system architectures.
• Hands-on experience with enterprise security tools such as SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, and firewalls.
• Experience contributing to incident response efforts, root cause analysis, and remediation planning.
• Strong scripting or automation skills using Python, Bash, PowerShell, or similar languages.
• Ability to operate independently, prioritize competing technical issues, and make sound decisions under pressure.
• Strong written and verbal communication skills, including the ability to document and effectively communicate risks, findings, tradeoffs, and recommendations to technical teams and leadership.

Responsabilidades

• Implement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure environments.
• Evaluate and recommend security tools, technologies, and configurations.
• Embed security into system lifecycles, engineering workflows, operational processes, and production environments.
• Design, tune, and validate detection logic, alerts, monitoring rules, and analytics for threats and anomalous activity.
• Assist and support incident response activities, including triage, investigation, containment, remediation, and recovery coordination.
• Perform root cause analysis and drive long-term corrective actions after security incidents or control failures.
• Support threat hunting, proactive risk identification, and security assessment activities.
• Develop scripts, tooling, automation, and repeatable workflows to improve security operations, monitoring, and response efficiency.
• Partner with DevOps, SRE, infrastructure, and engineering teams to integrate security tooling into CI/CD pipelines and operational workflows.
• Improve reliability, scalability, performance, and maintainability of security platforms and integrations.
• Document engineering standards, runbooks, design decisions, and operational procedures.
• Serve as an escalation point for complex security engineering issues.
• Work with operations teams to document processes and requirements.
• Collaborate cross-functionally with IT, DevOps, product, application, cloud, compliance, and SOC teams.

Conocimientos

Security engineering

Linux

Windows

Networking

Scripting/Automation

Incident response

Communication

Herramientas

SIEM platforms

EDR/XDR

IDS/IPS

Vulnerability scanners

Firewalls

CI/CD tooling

Cloud security tooling

Descripción del empleo

Everforth ECS in Portland, OR (Hybrid) seeks a Security Engineer to advance an Information Security Continuous Monitoring program for a federal client. You will translate complex security requirements into practical controls and drive continuous visibility across enterprise systems.

The role emphasizes SIEM engineering, log pipelines, dashboards, and vulnerability management using CAASM tooling (Axonius) to close asset visibility gaps.