Security Engineer – SIEM & Cloud Defense

CBRE; Richardson (TX); On-site; USD 90,000 - 140,000; Full time

Job summary

CBRE seeks a Cybersecurity Engineer in Richardson, TX to deploy and tune security controls across endpoint, identity, network and cloud domains. You will build detections, investigate incidents, and automate routine tasks in a large, global environment.

You will work with SIEM and data pipelines, maintain runbooks, and collaborate with cross‑functional teams on hardening and threat intel. A strong security foundation and clear written comms are essential.

Qualifications

• 3+ years in information security or IT infrastructure.
• Hands-on security engineering or SOC experience (1+ year).
• Experience with at least two of: EDR, email gateways, next‑gen firewalls, web proxies, WAFs, or cloud logging.
• Familiarity with Microsoft Entra ID (Azure AD) and attack patterns.
• Experience with SIEM or security data pipeline platforms.
• Proficiency in SQL and Python for log analysis.

Responsibilities

• Deploy, configure and maintain security controls across EDR, email security, proxies, firewalls, identity and cloud platforms.
• Onboard new log sources and troubleshoot ingestion/parsing issues.
• Support detection-coverage assessments against MITRE ATT&CK by documenting log source coverage and gaps.
• Build and tune detections in SIEM and data pipelines per senior guidance.
• Investigate suspicious activity and document findings for incidents.
• Run IOC searches across networks, identity, cloud and email logs when needed.
• Write and maintain scripts/integrations to automate security tasks.
• Collaborate with network/identity/cloud teams to implement hardening changes.
• Track vulnerability and threat intel for the CBRE stack and translate to patches/detections.
• Maintain runbooks and investigation notes.
• Participate in on-call rotation for tooling and pipelines.

Skills

Security engineering

SOC experience

SQL

Python

Troubleshooting

Written communication

Tools

CrowdStrike Falcon

Microsoft Defender

Azure Monitor

AWS CloudTrail

VPC Flow Logs

Palo Alto Networks

Job description

CBRE seeks a Cybersecurity Engineer in Richardson, TX to deploy and tune security controls across endpoint, identity, network and cloud domains. You will build detections, investigate incidents, and automate routine tasks in a large, global environment.

You will work with SIEM and data pipelines, maintain runbooks, and collaborate with cross‑functional teams on hardening and threat intel. A strong security foundation and clear written comms are essential.