Security Operations Engineer — MDR, IR & Cloud Security

Momentum; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with employer match

Disability insurance

Life insurance

Paid time off

Job summary

Momentum is seeking a Cybersecurity Operations Engineer to run security operations across a holding company and its portfolio, owning MDR operations, incident response, endpoint and cloud security posture today, while driving POC efforts for Cortex XSIAM and Prisma Access as we evaluate consolidating MDR and moving toward a unified SASE and cloud security architecture.

You will work closely with the Cybersecurity Manager and vCISO, collaborating with IT and engineering teams.

Qualifications

• 7–9 years of experience in cybersecurity operations, security engineering, or senior SOC/IR roles
• Hands-on MDR experience (alert triage, escalation workflows, MSSP management)
• Deep expertise with CrowdStrike Falcon (EDR, detection tuning, SIEM/LogScale)
• Endpoint security at scale (macOS with Jamf, Windows with Intune)
• Proven incident response leadership (led incidents end-to-end)
• Cloud security experience in AWS and either GCP or Azure (IAM, CloudTrail, GuardDuty, secrets management)
• Experience leading enterprise security platform evaluations and POCs
• Familiarity with SASE, CASB, or SSE architectures
• Active daily use of AI and automation (100% internal AI adoption; required)
• Experience in private equity, holding company, or multi-entity environments preferred

Responsibilities

• Lead MDR operations, incident response, and post-incident documentation
• Own endpoint security posture across macOS and Windows devices
• Define CIS baselines and hardening standards across endpoints and servers
• Evaluate and implement cloud security across AWS, GCP, and Azure
• Manage CASB and DLP vendor evaluation and implementation

Job description

Momentum is seeking a Cybersecurity Operations Engineer to run security operations across a holding company and its portfolio, owning MDR operations, incident response, endpoint and cloud security posture today, while driving POC efforts for Cortex XSIAM and Prisma Access as we evaluate consolidating MDR and moving toward a unified SASE and cloud security architecture.

You will work closely with the Cybersecurity Manager and vCISO, collaborating with IT and engineering teams.