Security Engineer - Incident Response & Infra Security

GXA; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

GXA is seeking a highly capable Security Engineer to support the delivery and operation of our gShield security services. This role is hands-on and technical, focused on security engineering, incident response, security tool operations, remediation execution, client security support, infrastructure security, and internal security improvement initiatives.

The Security Engineer serves as a Tier 3 escalation point for active security issues and plays a key role in operating and improving the

Qualifications

• Experience in security incident response and escalation.
• Hands-on security engineering across on-prem and cloud.
• Experience with security tooling and SIEMs.

Responsibilities

• Serve as a Tier 3 escalation point for active security incidents.
• Lead technical analysis during incident response and war rooms.
• Operate daily within the gShield toolstack (Huntress, MDE, Cyrisma, DNSFilter, SIEM).
• Troubleshoot security issues across identity, endpoints, servers, networking, and cloud.
• Support remediation and validation of vulnerabilities and security controls.
• Assist with client onboarding and security improvements across managed environments.

Skills

Incident Response

Tool Operations

Security Engineering

Threat Hunting

Log Analysis

Tools

Huntress

MDE

Cyrisma

DNSFilter

SIEM

Job description

GXA is seeking a highly capable Security Engineer to support the delivery and operation of our gShield security services. This role is hands-on and technical, focused on security engineering, incident response, security tool operations, remediation execution, client security support, infrastructure security, and internal security improvement initiatives.

The Security Engineer serves as a Tier 3 escalation point for active security issues and plays a key role in operating and improving the