We are looking for a Cyber Security Engineer to join a contract opportunity with permanent potential based in East Lansing, Michigan. This role focuses on strengthening enterprise security monitoring, expanding automation, and supporting identity and access controls across a complex technology environment. The ideal candidate brings hands-on experience with security logging, scripting, and infrastructure protection, along with the ability to improve operational efficiency through well-designed technical solutions.
Responsibilities:
- Build and refine methods for collecting security data from enterprise systems, endpoints, cloud platforms, and network technologies to improve threat visibility and analysis.
- Administer and enhance SIEM and log management capabilities, including onboarding new log sources, tuning event capture, and developing dashboards for continuous monitoring.
- Gather and normalize security telemetry from tools such as firewalls, intrusion detection and prevention platforms, web filtering technologies, and related infrastructure.
- Create automation scripts and repeatable workflows using PowerShell and Python to reduce manual effort in security operations and improve response times.
- Connect vulnerability assessment outputs with reporting and alerting processes so findings can be reviewed and addressed more efficiently.
- Develop automated solutions for user lifecycle administration, including account setup, removal, role updates, and access-related changes.
- Support identity and access management functions by helping implement governance practices, role-based access controls, single sign-on, multifactor authentication, and periodic access reviews.
- Integrate security platforms through APIs and configuration management approaches to strengthen operational consistency and support broader cybersecurity initiatives.
- Contribute to additional technical and security-related duties aligned with the scope of the position as business needs evolve.
- Bachelor’s degree in Computer Science, Information Systems, Business, or a related technology discipline, or an equivalent combination of education and progressively responsible experience.
- At least five years of relevant information technology experience in security engineering, cybersecurity operations, or a closely related area.
- Cybersecurity certification such as Security+, CySA+, or a comparable credential.
- Demonstrated experience with cybersecurity tools and controls, including firewalls, security monitoring platforms, and configuration management practices.
- Hands-on scripting or programming experience with Python and PowerShell to support automation and integration efforts.
- Familiarity with identity and access management concepts such as provisioning, access approvals, RBAC, SSO, MFA, and audit reviews.
- Experience working with technologies such as Check Point, Cisco ASA, or similar firewall and network security platforms.
- Ability to work with export-controlled items.