Staff Security Engineer: Cloud, SIEM & Incident Response

Color Employer, LLC; Alabama; Hybrid; USD 125,241 - 187,862; Full time

Job summary

Lyric is seeking a senior security engineer to design and operate comprehensive security controls across cloud and on‑prem environments. You will build, tune, and automate detections, manage IAM and EDR capabilities, and lead incident response efforts in a fast‑paced, AI‑first healthcare technology company.

You will mentor engineers, uphold regulatory standards, and collaborate with architecture to continuously improve security postures.

Qualifications

• Minimum of seven (7) years of hands-on security engineering and/or security operations.
• Minimum of three (3) years of engineering and operating security controls within AWS and Microsoft Azure.
• Legal work authorization to work in the U.S.; visa sponsorship unavailable.

Responsibilities

• Design, build, deploy, and operate security controls and tooling across cloud platforms and networks.
• Tune and maintain SIEM content, log onboarding, correlations, and detections; drive automation to reduce response times.
• Administer and optimize the endpoint detection and response (EDR) platform, including sensor deployment and hardening.
• Engineer and maintain IAM capabilities (SSO, MFA, conditional access, PIM, lifecycle automation).
• Partner with Security Architecture to translate reference architectures into implementable controls and provide feedback.
• Serve as technical lead during security incidents; develop containment tooling, forensics readiness, and post-incident reviews.
• Operate the vulnerability management lifecycle; drive remediation with cross-functional teams.
• Enforce baseline security configurations via IaC and policy-as-code; include CIS benchmarks and network segmentation.
• Evaluate security technologies, provide recommendations aligned to policy and threat drivers.
• Mentor junior engineers and maintain runbooks; participate in on-call rotations.

Skills

Security engineering

Security operations

AWS

Azure

EDR

SIEM

Scripting

Education

Bachelor's degree in Computer Science/IS

Tools

CrowdStrike Falcon

Terraform

PowerShell

Python

SIEM tooling

Job description

Lyric is seeking a senior security engineer to design and operate comprehensive security controls across cloud and on‑prem environments. You will build, tune, and automate detections, manage IAM and EDR capabilities, and lead incident response efforts in a fast‑paced, AI‑first healthcare technology company.

You will mentor engineers, uphold regulatory standards, and collaborate with architecture to continuously improve security postures.