Senior Security Engineer (Systems Engineer 2 or 3)

Metrocouncil; Minnesota; Hybrid; USD 85,000 - 140,000; Full time

Job summary

An established industry player is seeking a Senior Security Engineer to enhance cybersecurity measures in the Twin Cities region. This pivotal role involves implementing and managing Palo Alto Networks' Cortex solutions, focusing on threat detection and incident response. You will work alongside a dedicated team to optimize security infrastructure and develop policies that protect the organization’s assets. With a commitment to diversity and community service, this role offers a unique opportunity to make a significant impact while enjoying a competitive salary and excellent benefits. Join a forward-thinking organization that values innovation and teamwork in a hybrid work environment.

Benefits

On-site training

Tuition reimbursement

Competitive salary

Excellent benefits

Good work/life balance

Qualifications

• Solid understanding of cybersecurity principles and EDR/SOAR technologies.
• Experience with Palo Alto Networks' Cortex solutions is essential.
• Ability to implement security policies and conduct threat hunting activities.

Responsibilities

• Implement and manage Palo Alto Networks' Cortex solutions for security enhancement.
• Conduct threat hunting and incident response activities to safeguard systems.
• Collaborate with IT teams to optimize security tools in a Windows environment.

Skills

Cybersecurity

Endpoint Detection and Response (EDR)

Security Orchestration, Automation and Response (SOAR)

Threat Detection

Incident Response

Threat Hunting

Networking Principles

Problem-Solving Skills

Communication Skills

Education

Bachelor's Degree in Computer Science or Systems Security

Associate's Degree

High School Diploma/GED

Tools

Palo Alto Networks Cortex

Cortex XDR

Cortex XSOAR

Cortex Xpanse

SIEM Technologies

Python

PowerShell

Bash

Job description

This posting is open continuously. However, it may close at any time after May 9, 2025. Priority will be given to applications received on or before May 9, 2025.

We are the Metropolitan Council, the regional government for the seven-county Twin Cities metropolitan area. We plan 30 years ahead for the future of the metropolitan area and provide regional transportation, wastewater, and housing services. More information about us on our website.

We are committed to supporting a diverse workforce that reflects the communities we serve.

Information Services is the central IT department supporting all divisions of the Metropolitan Council. Our 140 team members provide technology, practices, and innovative solutions that enable the core services of the Council.

How your work would contribute to our organization and the Twin Cities region:

We are seeking a highly skilled Senior Security Engineer (Systems Engineer 2 or 3) with a focus on Palo Alto Networks Cortex to join our cybersecurity team. In this role, you will be responsible for implementing, managing, and optimizing Palo Alto Networks' Cortex solutions to enhance our organization's security posture. You will be involved with advanced threat hunting and incident response.

As our Cortex Security Engineering Specialist, you will be the primary expert on Palo Alto Networks' Cortex portfolio, including Cortex XDR, XSOAR, and Cortex Xpanse. You will work closely with our internal IT and security teams to leverage these tools effectively in our environment.

The ideal candidate should have a solid understanding of Windows Server and Desktop OS, as well as networking principles, to effectively implement and manage Cortex XDR and Cortex Pro Per GB across the organization's infrastructure. This knowledge will be crucial in optimizing Cortex XDR's capabilities for threat detection, incident response, and overall security enhancement in a Windows-centric environment.

This position is eligible for a hybrid (both remote and onsite) telework arrangement. Candidate's permanent residence must be in Minnesota or Wisconsin.

Full Salary Range

Systems Engineer 2: $41.34 - $67.08 hourly/$85,987 - $139,526 yearly
Systems Engineer 3: $44.72 - $72.53 hourly/$93,018 - $150,862 yearly

Architect, Implement and Manage EDR Solutions:

• Configure and fine-tune Cortex XDR policies to optimize threat detection and response capabilities, taking into account the specific needs of various Windows OS versions
• Implement and maintain Cortex XDR network security features, leveraging your understanding of networking principles to enhance threat visibility and protection
• Create and maintain incident response playbooks within Cortex XDR, tailored to the organization's Windows-based infrastructure
• Provide regular reports and insights to management on the state of endpoint and network security, leveraging Cortex XDR's analytics capabilities

Security Best Practices:

• Design, implement, and maintain our Cortex-based security infrastructure
• Develop and execute security policies and procedures using Cortex tools
• Conduct threat hunting and incident response activities
• Automate security operations and orchestrate responses using Cortex XSOAR
• Manage and optimize our attack surface reduction using Cortex Xpanse, Shodan or similar tool
• Collaborate with other security teams to integrate endpoint security solutions with our existing security stack
• Provide technical guidance and training to other team members on Cortex products
• Stay current with the latest features, updates, and best practices for Palo Alto Networks’ solutions
• Develop and maintain documentation for Cortex-related processes and configurations

Minimum Requirements:

Systems Engineer 2:

Any of the following combinations of education (in Computer Science, Systems Security, or similar) and related experience:

• Bachelor's degree and 4 years of experience
• Associate's degree and 6 years of experience
• High school diploma/GED and 8 years of experience

Experience should include cybersecurity, with a focus on endpoint detection and response (EDR) and security orchestration, automation and response (SOAR) technologies, and Palo Alto, particularly XDR and XSOAR.

Systems Engineer 3:

Any of the following combinations of education (in Computer Science, Systems Security, or similar) and related experience:

• Bachelor's degree and 5 years of experience
• Associate's degree and 7 years of experience
• High school diploma/GED and 9 years of experience

Experience should include cybersecurity, with a focus on endpoint detection and response (EDR) and security orchestration, automation and response (SOAR) technologies, and Palo Alto, particularly XDR and XSOAR.

Additional skills and experience (desired qualifications):

• Understanding of threat detection, incident response, and threat hunting methodologies
• Familiarity with common cybersecurity frameworks (e.g., NIST, ISO 27001, MITRE ATT&CK)
• Experience with scripting and automation using languages such as Python, PowerShell, or Bash
• Knowledge of log analysis, SIEM technologies, and security analytics
• Excellent problem-solving skills and ability to work under pressure during security incidents
• Strong communication skills to explain technical concepts to both technical and non-technical audiences
• Relevant certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Certified Information Systems Security Professional (CISSP), or GIAC Security Essentials (GSEC) are a plus
• In-depth knowledge of Palo Alto Networks' Cortex products and their practical applications
• Strong background in SOC processes, threat detection, and incident response
• Ability to create and maintain automation workflows for security operations
• Experience integrating various security tools and technologies
• Strong analytical skills for interpreting security data and identifying trends
• Commitment to staying updated on the latest cybersecurity threats and technologies

What you can expect from us:

• We offer the opportunity to make a difference and positively influence the Twin Cities metropolitan area
• We encourage our employees to develop their skills through on-site training and tuition reimbursement
• We provide a competitive salary, excellent benefits and a good work/life balance

Work Environment:

Work is performed in a standard office setting. May require travel between primary worksite and various locations on short notice to resolve computer system problems.

If you are new to the Metropolitan Council, you must pass a drug test (safety sensitive positions only), and a background check which verifies education, employment, and criminal history. A driving record check and/or physical may be conducted if applicable to the job. If you have a criminal conviction, you do not automatically fail. The Metropolitan Council considers felony, gross misdemeanor and misdemeanor convictions on a case-by-case basis, based on whether they are related to the job and whether the candidate has demonstrated adequate rehabilitation.

If you are already an employee of the Metropolitan Council, you must pass a drug test (if moving from a non-safety sensitive position to a safety sensitive position) and criminal background check if the job you're applying for is safety sensitive, is a supervisory or management job, is in the Finance, Information Services, Audit, or Human Resources departments, or has access to financial records, files/databases, cash, vouchers or transit fare cards. A driving record check and/or physical may be conducted if applicable to the position.

IMPORTANT: If you make a false statement or withhold information, you may be barred from job consideration.

The Metropolitan Council is an Equal Opportunity, Affirmative Action, and veteran-friendly employer. The Council is committed to a workforce that reflects the diversity of the region and strongly encourages persons of color, members of the LGBTQ community, individuals with disabilities, women, and veterans to apply.

If you have a disability that requires accommodation during the selection process, please email [e-mail].