Senior Cybersecurity Engineer, Managed Services

Critical-Start-; Washington (District of Columbia); On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

Competitive salary with bonuspotential

Comprehensive health benefits

Unlimited PTO

401(k) with matching

Life Insurance & Disability

Parental & Military Leave

Job summary

Critical Start seeks a Sr. Cybersecurity Engineer to join our Managed Security Services team. You will design, implement, and improve deliverables for our MSS program, onboarding and supporting security technologies such as Microsoft Sentinel, Sumo Logic, and Splunk, while maintaining multiple SIEM environments.

The role requires 5+ years in cybersecurity engineering, 3+ years with SIEM, and 2+ years with EDR;Plano, TX-based office with strong collaboration and growth opportunities is offered.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience and industry certifications.
• 5+ years of experience in a cybersecurity engineering role
• 3+ years of experience with SIEM tools like Splunk or Microsoft Sentinel.
• Proficiency in handling security data sources, log formats, and data ingestion methods.
• Experience creating SIEM content such as alerts, reports, and dashboards.
• Strong communication and customer service skills.
• 2+ years of experience with next-gen antivirus (AV) or endpoint detection and response (EDR) solutions.
• Scripting capabilities in Bash, PowerShell, Python, or others.
• Ability to establish trust and rapport with customers, even when dealing with complex technical issues.

Responsibilities

• Maintain Expertise: Stay at the forefront of the industry by continuously updating your knowledge in SIEM tools and EDR/XDR integrations.
• Client Engagement: Deliver our managed services to clients through project-based workflows related to SIEM and EDR/XDR technologies.
• Technical Guidance: Provide technical leadership, expertise, and configuration assistance to both colleagues and clients, helping them maintain robust and effective SIEM and Endpoint security programs.
• Technical Development: Collaborate on developing technical pathways to foster growth within the organization and lead cross-functional training sessions.
• Best Practices: Create and maintain best practices and assist clients in deploying and configuring endpoint agents, security policies, log forwarders, data sources, content, and alerts.
• Security Maturation: Assist clients in maturing their SIEM and Endpoint security products in alignment with industry standards and our program offerings.
• Problem Resolution: Act as a senior technical escalation resource on the team. Troubleshoot interactions between data sources and SIEM technologies, as well as API interactions between supported security integrations and our platform (CORR).
• Automation: Identify opportunities to automate aspects of SIEM and Endpoint engineering workload, enhancing efficiency and accuracy.
• Client Collaboration: Work closely with clients to address technical concerns, provide value reporting, and configure their environments effectively.
• Documentation: Develop and maintain comprehensive security documentation, including playbooks, standard operating procedures, and training materials as needed.
• Continuous Learning: Stay up-to-date with the latest security threats and trends, incorporating this knowledge into our security solutions. Obtain and maintain relevant security certifications.
• Team Collaboration: Collaborate with fellow cybersecurity engineers, product managers, and architects to design and implement innovative security solutions, ensuring the highest level of protection for our clients.

Skills

SIEM expertise

EDR/XDR knowledge

Scripting Bash/PowerShell/Python

Communication skills

Customer service

Security engineering

Education

Bachelor's degree in CS/Cybersecurity/IT

Industry certifications

Tools

Splunk

Microsoft Sentinel

Sumo Logic

Palo Alto Cortex XDR

Defender for Endpoint/Server

SentinelOne

Job description

Who We Are

Ready to make a real impactincybersecurity? At Critical Start,we'renot just protecting organizations;we'reredefining howit'sdone.We'rea team united by an inspiring purpose: to stop breaches, simplify security, and shape the future of cyber defense. Ifyou'repassionate aboutcutting-edgetechnology, thrive in a collaborative environment, and want your work to truly matter,you'vefound your home.

We deliver 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. This means we cut through the noise, investigate real threats, and take trusted, SLA-backed action—all powered by the brightest minds and the latest AI. Since 2012,we'vebeen helping organizations outpace evolving attacks with fasterresponse, fewer escalations, and measurable risk reduction.

Innovationisn'tjust a buzzword here;it'sour DNA. We pioneered the first MOBILESOC app for on-the-go detection and response, infused AI into automated alert resolution toeliminatenoise, and slashed investigation time by an astounding 99.3%.We'retransforming how security teams work, and you could be a part of it. From AI-assisted triage to analyst copilots that elevate humanexpertise, we combine machine intelligence with human judgment to deliveroutcomesourcustomer’strust.

Ifyou'relooking for a high-trust, high-impact team where your ideas are amplified by AI and valued by colleagues and customers alike, Critical Start is the place for you. Come build the future of cybersecurity with us.

Wanttohearfromourteam? Watchthese videosto gain insights into life at Critical Start or check out our Glassdoor reviews for an inside look.

Who You Are

We are searching for a dedicated and proficient Sr. Cybersecurity Engineer to join our Managed Security Services team. As the Senior Engineer, you will have a crucial role in designing, implementing, and improving deliverables for our Managed Services program. Your responsibilities also include monitoring and maintaining multiple SIEM environments within the scope of Critical Start's Managed Services offerings. You will collaborate with both team members and clients to onboard and support various security technologies such as Microsoft Sentinel, Sumo Logic, and Splunk, while also creating customized solutions to enhance our services.

What You Will Be Doing?

As the Senior Engineer, your daily tasks involve configuring data sources and log forwarders, creating custom content (dashboards, workbooks, reports, alerts), conducting thorough environment reviews and gap analyses, and fulfilling advanced SIEM requests. Additionally, you serve as the subject matter expert and escalation point for both internal cross-collaboration and complex client issues. The ideal candidate possesses expert knowledge in Security Information and Event Management (SIEM) tools like Microsoft Sentinel, Splunk, and Sumo Logic, as well as expertise in Endpoint Detection and Response/Extended Detection and Response (EDR/XDR) integrations such as SentinelOne, Defender for Endpoint/Server, and Palo Alto Cortex XDR. In your role as the Senior Engineer, you play a vital part in delivering managed services to our clients, ensuring the smooth operation of their security infrastructure.

• Maintain Expertise: Stay at the forefront of the industry by continuously updating your knowledge in SIEM tools and EDR/XDR integrations.
• Client Engagement: Deliver our managed services to clients through project-based workflows related to SIEM and EDR/XDR technologies.
• Technical Guidance: Provide technical leadership, expertise, and configuration assistance to both colleagues and clients, helping them maintain robust and effective SIEM and Endpoint security programs.
• Technical Development: Collaborate on developing technical pathways to foster growth within the organization and lead cross-functional training sessions.
• Best Practices: Create and maintain best practices and assist clients in deploying and configuring endpoint agents, security policies, log forwarders, data sources, content, and alerts.
• Security Maturation: Assist clients in maturing their SIEM and Endpoint security products in alignment with industry standards and our program offerings.
• Problem Resolution: Act as a senior technical escalation resource on the team. Troubleshoot interactions between data sources and SIEM technologies, as well as API interactions between supported security integrations and our platform (CORR).
• Automation: Identify opportunities to automate aspects of SIEM and Endpoint engineering workload, enhancing efficiency and accuracy.
• Client Collaboration: Work closely with clients to address technical concerns, provide value reporting, and configure their environments effectively.
• Documentation: Develop and maintain comprehensive security documentation, including playbooks, standard operating procedures, and training materials as needed.
• Continuous Learning: Stay up-to-date with the latest security threats and trends, incorporating this knowledge into our security solutions. Obtain and maintain relevant security certifications.
• Team Collaboration: Collaborate with fellow cybersecurity engineers, product managers, and architects to design and implement innovative security solutions, ensuring the highest level of protection for our clients.

What You Will Bring?

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience and industry certifications.
• 5+ years of experience in a cybersecurity engineering role
• 3+ years of experience with SIEM tools like Splunk or Microsoft Sentinel.
• Proficiency in handling security data sources, log formats, and data ingestion methods.
• Experience creating SIEM content such as alerts, reports, and dashboards.
• Strong communication and customer service skills.
• 2+ years of experience with next-gen antivirus (AV) or endpoint detection and response (EDR) solutions.
• Scripting capabilities in languages like Bash, PowerShell, Python, or others.
• Ability to establish trust and rapport with customers, even when dealing with complex technical issues.

Desired Qualifications:

• Familiarity with cloud platforms (Azure, AWS, or GCP).
• Experience deploying security solutions in an MSSP environment is a plus.
• Experience with DevOps tools is a plus (Terraform, Ansible, Puppet, Salt Stack, etc.).
• Scripting abilities in Bash, PowerShell, Python, or other programming/scripting languages.

What It's Like Working Here

Imagine a dynamic, enjoyable, and rewarding work environment. We are professionals, and the work we do holds immense significance, like saving our customers from potential disasters. However, we believe in not taking ourselves too seriously.

Prefer a casual dress code every day? No problem, as we find comfort enhances our thinking.

Our workplace in Plano, TX offers open offices, collaborative meeting spaces, phone rooms, and wellness rooms. In the breakroom, friendly competition arises with games like ping-pong, bubble hockey machine, foosball, orthe gamingmachine. What harm does a little healthy competition among friends do?

What does our Compensation and Benefits package entail?

• Competitive salary with bonus potential

• Comprehensive health benefits with generous employer contributions for medical, dental, andvision

• Additional Ancillary Benefits offered at 100% employee contribution

• Unlimited PTO (Paid Time Off) policy

• Paid Parental and Military Leave

• Dental and Vision Plan

• Employer-provided Life Insurance, Long-Term Disability, and Short-Term Disability coverage

• Additional Voluntary Life Insurance coverage

• 401(k) Plan with Matching Program

• Mines Employee Assistance Program

• Monthly Wellness Initiatives

• Optional Pet Benefits Discount Plan

We prioritize your privacy and security. Please note that Critical Start will never request financial information or sensitive personal data during the interview process. If youencounterany suspicious requests, do not respond and contact us directly at [e-mail]. Thank you for helping usmaintaina safe and trustworthy hiring experience.

Critical Start welcomes people from all backgrounds andwalks of life. One of our core values is to “Do what’s best for our employees,” and that starts with the hiring process by finding the best candidates and providing an environment that upholds equal employment opportunities for all employees and applicants, strictly prohibiting any form of discrimination or harassment based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy encompasses all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Mental and Physical Requirements

It'simportant to note that specific physical and mental requirements may vary depending on the nature of theofficejob, organization, and individual responsibilities.

Physical:

• Stationary position for extended periods of time.

• Constantlyoperatea computer.

• Occasionally you maybe requiredto move equipment or other items up to 20 lbs.

• The ability to communicate information and ideas so others will understand.Mustbe able to exchangeaccurateinformation in these situations.

Mental:

• Must be able to apply established protocolsin a timely manner.

• Maketimelydecisions in the context of workflow.

• Ability to complete tasks and perform in situations requiring speed deadlines, or productivity quota.

• Ability to work effectively and efficiently in high stress situations.

• Ability to simultaneously address multiple complex problems.

For positions that can or will be performed, in whole or in part, remotely within the U.S., range and benefits information for this position are being includedin accordance withrequirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, experience, performance in the role and potential for revenue generation (sales roles only).

Compensation:

The total compensation range (base) being offered for this role is [$120,000 - $140,000 USD].

Additional Compensation:

This role is not eligible foradditionalor other forms of compensation.

Employment Benefits:

Comprehensive health benefits with generous employer contributions for medical, dental, and vision, unlimited PTO (Paid Time Off) policy, paid Parental and Military Leave, dental and vision plan, Employer-provided Life Insurance (up to $100K coverage), Long-Term Disability, and Short-Term Disability coverage, 401(k) Plan with Matching Program, 24/7/365 availability of Employee Assistance Program.

Application Deadline:

The application deadline for this position is October 14, 2026.

#LI-CV1

#LI-Remote