Security Platform Engineer

Galveston County Human Resources; Galveston (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Family coverage

Retirement security (TCDRS)

Life insurance

Disability

Paid time off

Holidays

Wellness programs

Employee assistance

Job summary

The County of Galveston is seeking a Senior Security Platform Engineer to serve as the county's top cybersecurity technologist, responsible for configuring, integrating, and optimizing enterprise security platforms. The role leads security engineering efforts and provides advanced technical support during cybersecurity incidents.

You will ensure security controls operate effectively, produce actionable detection signals, and align with risk management.

Qualifications

• Requires Bachelor's degree in cyber security, computer science, information management or related field, or equivalent combination of education and experience.
• Requires four years of progressive experience in installation, maintenance, and operation of cybersecurity systems and applications or related technical role.
• Requires experience configuring and managing enterprise security platforms, including firewalls, endpoint protection, and detection systems.
• Requires strong understanding of secure network architecture, including DNS, DHCP, packet inspection, and firewall policy management.
• Experience with Cisco or Palo Alto firewalls, XDR or endpoint detection platforms, DNS-layer security solutions, and MFA systems.

Responsibilities

• Configures, maintains, and optimizes enterprise security platforms across endpoint, network, email, cloud, and identity environments.
• Tunes detection policies and controls to reduce false positives and improve signal quality.
• Ensures telemetry and logging integration across security systems.
• Implements security platform upgrades and configuration improvements.
• Performs advanced technical analysis during escalated security incidents.
• Identifies scope, root cause, and containment strategies during complex events.
• Implements containment and control adjustments as directed by Information Security Officer.
• Leads post-incident hardening and detection improvement efforts.
• Oversees vulnerability scanning processes and prioritizes remediation with infrastructure teams.
• Supports penetration testing activities and implements corrective actions.
• Recommends security control enhancements and platform improvements.

Skills

Enterprise security platforms

Firewalls

Endpoint protection

Detection systems

XDR

DNS-layer security

MFA systems

Education

Bachelor's degree in cyber security / computer science / information management or related field

Equivalent combination of education and experience

Tools

PowerShell

Python

SIEM integration

Job description

General Description

The Security Platform Engineer serves as the County's senior technical cybersecurity specialist and is responsible for the configuration, integration, optimization, and resilience of enterprise security platforms. The position leads security engineering efforts and provides advanced technical support during cybersecurity incidents.

The Security Platform Engineer ensures that security controls operate effectively, produce actionable detection signals, and align with operational and risk management objectives. The position participates in an established on-call rotation and provides escalated technical response during security events.

Duties and Responsibilities

The functions listed below are those that represent the majority of the time spent working in this class. Management may assign additional functions related to the type of work of the class as necessary.

• Configures, maintains, and optimizes enterprise security platforms across endpoint, network, email, cloud, and identity environments.


• Tunes detection policies and controls to reduce false positives and improve signal quality.


• Ensures telemetry and logging integration across security systems.


• Implements security platform upgrades and configuration improvements.


• Performs advanced technical analysis during escalated security incidents.


• Identifies scope, root cause, and containment strategies during complex events.


• Implements containment and control adjustments as directed by the Information Security Officer.


• Leads post-incident hardening and detection improvement efforts.


• Oversees vulnerability scanning processes and prioritizes remediation activities in coordination with infrastructure teams.


• Supports penetration testing activities and implements corrective actions.


• Recommends security control enhancements and platform improvements to the Information Security Officer.


• Maintains documentation of system configurations and security architecture.


• Maintains confidentiality and integrity when handling sensitive information.


• Addresses support tickets as assigned within SLA limits.


• Performs other duties as assigned.

Minimum Education and Experience Requirements

• Minimum Education and Experience Requirements:


• Requires Bachelor's degree in cyber security, computer science, information management or related field, or equivalent combination of education and experience.


• Requires four years of progressive experience in the installation, maintenance, and operation of cybersecurity systems and applications or a related technical role.


• Requires experience configuring and managing enterprise security platforms, including firewalls, endpoint protection, and detection systems.


• Requires strong understanding of secure network architecture, including DNS, DHCP, packet inspection, and firewall policy management.


• Experience with enterprise security platforms such as Cisco or Palo Alto firewalls, XDR or endpoint detection platforms, DNS-layer security solutions, application delivery controllers, and enterprise multi-factor authentication systems.

Physical Demands/Work Environment

Physical demands refer to the requirements for physical exertion and coordination of limb and body movement.

Unavoidable hazards refer to the job conditions that may lead to injury or health hazards even though precautions have been taken.

The work is typically performed sitting at a desk or table or while intermittently sitting, standing, bending, crouching, or stooping. The employee occasionally lifts light and heavy objects.

The work is typically performed in an office.

This position is required to be on call as needed and must be available 365/24/7 to respond to security incidents.

Emergency Preparedness Tier Level: 2

Special Certifications and Licenses

• Prefers Cisco security certifications or equivalent enterprise security certification.


• Prefers experience integrating security platforms with SIEM or analytics systems.


• Prefers scripting or automation experience (e.g., PowerShell, Python).


• Requires CJIS compliance eligibility.


• Requires valid Texas Driver's License.

Benefits

Build your career with The County of Galveston, where your health and well-being matter! As a benefit-eligible employee, you will enjoy:

• Flexible, comprehensive health benefits with multiple plan choices, including $0 premium options


• Full family coverage options for medical, dental, and vision


• Strong retirement security through TCDRS with generous 200% county matching (once vested & retirement eligible)


• County paid term and whole life insurance policies and long-term disability


• Work-life balance through paid time off, holidays, and other wellness initiatives


• Supportive networks through EAP and Marketplace Care Partners

The County of Galveston is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, religion, sex, sexual orientation, age, disability, gender identity or expression, genetic information, veteran status or any other characteristic protected by law.