Senior Cyber Security Engineer - Cloud, SIEM & Compliance

Brown and Caldwell, Inc.; Walnut Creek (CA); On-site; USD 129,000 - 212,000; Full time

Job summary

Brown and Caldwell is seeking a Senior Cyber Security Engineer to design, implement, and support complex security solutions in a fast-paced environment. You will drive the organization’s security posture, align with industry frameworks, and guide risk-based decisions with minimal supervision.

You will partner with technical and business teams to deliver secure, high-quality capabilities while maturing controls, SIEM, and detection capabilities.

Qualifications

• Typically, a minimum of 8 years of relevant cyber security experience.
• Experience with incident and vulnerability management and security guidance.
• Relevant governance/compliance certifications (e.g., CISSP, CISA, CRISC, CGRC) preferred.
• Hands-on compliance or audit-support experience.

Responsibilities

• Provide security guidance on complex issues to employees and teams.
• Design, build, and automate security solutions and tooling.
• Investigate and respond to alerts, incidents, and vulnerabilities.
• Drive compliance and control maturity against SOC2, CMMC, and audits.
• Mentor colleagues and collaborate with technical/business teams.
• Stay ahead of emerging threats and help shape response.

Skills

Security principles

Data-driven decisions

Communication

Application security

SIEM & detection

Automation & scripting

Cloud security (Azure)

Education

Bachelor's degree in CS/Cybersecurity/IS or related field

CISSP or Security+ certification

Tools

SIEM

Azure security tools

Automation tooling

Job description

Brown and Caldwell is seeking a Senior Cyber Security Engineer to design, implement, and support complex security solutions in a fast-paced environment. You will drive the organization’s security posture, align with industry frameworks, and guide risk-based decisions with minimal supervision.

You will partner with technical and business teams to deliver secure, high-quality capabilities while maturing controls, SIEM, and detection capabilities.