Senior Security Engineer – Detection & PKI

PTR Global; Irving (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

PTR Global is seeking a security engineer with 5+ years of independent project ownership in security engineering. The role emphasizes PKI design and operations, from enrollment protocols to policy statements, with hands-on detection engineering using Microsoft Sentinel and KQL.

Candidates will own remediation lifecycle processes, track findings to closure, and document investigations thoroughly. Preference for AI tooling experience and scripting ability to automate workflows.

Qualifications

• 5+ years in security engineering with independent project ownership.
• Hands-on PKI engineering; not just certificate consumption.
• Experience with detection engineering, end-to-end security investigations, and strong documentation.

Responsibilities

• Own self-directed detection engineering, investigations, and dashboards.
• Design and operate PKI solutions including enrollment protocols and CPS/CP/CPS documentation.
• Lead remediation lifecycle processes from finding to closed status.

Skills

Security engineering

Detection engineering

PKI engineering

Remediation lifecycle

Documentation

KQL

SCEP/EST

NIST SP 800-63

Certificate-based auth

Tools

Microsoft Sentinel

KQL

PowerShell

Python

Job description

5+ years in security engineering with demonstrated independent project ownership (not queue-based SOC analyst experience), including hands-on PKI engineering

• Self-directed detection engineering & investigation — Microsoft Sentinel, KQL/query and rule authoring, dashboards, and end-to-end security event investigation, driven independently with strong written documentation (not queue/triage-based SOC work).
• PKI engineering (not just certificate consumption) — demonstrable understanding of PKI solution design and operations: enrollment protocols (SCEP, EST), Certificate Policy / Certification Practice Statement (CP/CPS), trusted roles, Levels of Assurance, NIST SP 800-63, and real use cases such as certificate-based authentication and software signing/validation.
• Remediation lifecycle engineering — owning remediation-plan review and vulnerability/finding tracking from finding to validated closure.

Nice to Have Skills and Experience (preferred but not required):

Hands-on AI/agentic security tooling (e.g., Claude / LLM-assisted code & configuration analysis, prompt engineering for security use cases) per CISO AI direction; Absolute endpoint platform engineering (SSO, policy groups, API); scripting/automation (Python/PowerShell); aviation / OT / cyber-physical or embedded-systems exposure; HSM / key-management and code-signing infrastructure; aviation security.