Senior Cybersecurity Engineer: IR, SOAR & Automated SOC

Kimley Horn; Raleigh (NC); Presencial; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Excellent Retirement Plan

Comprehensive Health Coverage

Time Off and Flexible Scheduling

Financial Wellness and Bonuses

Professional Development and Training

Family-Friendly Benefits

Descripción de la vacante

Kimley-Horn in Raleigh seeks a Cybersecurity Engineer to own key Security Operations capabilities. This hands-on role strengthens threat detection, incident response, monitoring, and security automation within an in-office setting.

You will lead IR operations, develop playbooks, and elevate SOC maturity by integrating SOAR, analytics, and AI-assisted workflows. Expertise in EDR/XDR and SIEM is required to protect enterprise assets.

Formación

• Bachelor’s degree in information security or related field.
• 5+ years in security operations or incident response.
• Hands-on with EDR/XDR, SIEM, and SOAR.
• Experience in enterprise security incidents.
• Relevant security certifications preferred.

Responsabilidades

• Lead incident response operations as primary escalation point.
• Develop and improve incident response playbooks and escalation paths.
• Investigate, contain, remediate, and document lessons learned.
• Advance SOC automation through orchestration and analytics.
• Administer and optimize EDR/XDR technologies and telemetry.
• Onboard data sources to SIEM and refine detections.
• Design automated alert enrichment and response workflows.
• Conduct proactive threat hunting across multiple telemetry sources.
• Collaborate with internal teams and vendors for improvements.
• Prepare incident reports and metrics for stakeholders.

Conocimientos

Incident Response

Threat Detection

Security Operations

On-call Leadership

Educación

Bachelor’s degree in information security or related field

Herramientas

SIEM

EDR/XDR

SOAR

APIs

Descripción del empleo

Kimley-Horn in Raleigh seeks a Cybersecurity Engineer to own key Security Operations capabilities. This hands-on role strengthens threat detection, incident response, monitoring, and security automation within an in-office setting.

You will lead IR operations, develop playbooks, and elevate SOC maturity by integrating SOAR, analytics, and AI-assisted workflows. Expertise in EDR/XDR and SIEM is required to protect enterprise assets.