Sr. Security Engineer

Senior Security Engineer/ Hands-On Architect-Network | Cloud | Endpoint | Security Operations Help shape and strengthen enterprise cybersecurity across multiple CJIS-regulated environments.

We're seeking a highly technical Senior Security Engineer to provide hands-on engineering leadership across network, endpoint, cloud, identity, and security operations. This is an opportunity to take ownership of critical security platforms, engineer enterprise-wide protective controls, and help advance the security posture of an organization supporting three CJIS-covered entities.

The ideal candidate brings deep technical expertise, experience working with sensitive criminal justice information, and the ability to lead complex security initiatives while mentoring and collaborating with other technical teams.

What You'll Do

Security Engineering & Technical Leadership

• Lead the design, implementation, administration, and continuous improvement of enterprise security platforms and controls.
• Establish technical standards, security configurations, engineering procedures, and documentation.
• Lead complex troubleshooting, technical design reviews, platform upgrades, and security initiatives.
• Mentor engineers and analysts and partner with infrastructure, networking, cloud, and application teams.

Network, Application & Endpoint Security

• Engineer and administer enterprise firewalls, including Palo Alto Networks and Fortinet.
• Manage application protection technologies, including Cloudflare WAF and F5 Local Traffic Manager.
• Lead endpoint detection and response capabilities using CrowdStrike Falcon and Microsoft Defender for Endpoint.
• Support threat hunting, incident response, containment, and remediation activities.

Cloud & Identity Security

• Engineer security controls across Azure, Microsoft 365, and applicable AWS environments.
• Administer Microsoft Entra ID, Conditional Access, MFA, PIM, RBAC, and Global Secure Access.
• Support Microsoft Intune, Purview, and Cisco ISE.
• Identify and coordinate remediation of cloud misconfigurations and identity-related security risks.

Security Operations, SIEM & Automation

• Lead administration and optimization of Microsoft Sentinel and Splunk.
• Develop and tune security detections, correlation rules, dashboards, and KQL investigations.
• Improve monitoring, alerting, and incident response through automation using PowerShell, Python, Logic Apps, Git, and Azure DevOps.
• Align detection engineering with MITRE ATT&CK and establish meaningful operational metrics.

Vulnerability & Exposure Management

• Coordinate vulnerability identification, prioritization, and remediation using Qualys, Nessus, and Defender EASM.
• Evaluate vulnerabilities based on exploitability, exposure, severity, and business impact.
• Partner with technical teams to drive remediation, implement compensating controls, and verify results.

Interested candidates should contact Sally Lander at 612.249.0254 or submit resumes to sally.lander@roberthalf.(com).

• 5+ years of progressive experience in cybersecurity engineering/architecture, or enterprise infrastructure security.
• Demonstrated hands-on experience engineering and administering enterprise security technologies.
• Experience protecting sensitive data in CJIS-regulated environments, ideally supporting multiple CJIS-covered entities.
• Strong knowledge of network security, endpoint protection, cloud security, identity management, SIEM, incident response, and vulnerability management.
• Experience providing technical leadership, coordinating cross-functional initiatives, and mentoring technical team members.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Experience with Palo Alto Networks, CrowdStrike Falcon, Cloudflare WAF, Cisco ISE, Microsoft Sentinel, and Microsoft Defender XDR.
• Familiarity with Entra ID, Conditional Access, PIM, Intune, KQL, PowerShell, Python, and Logic Apps.
• Experience with NIST CSF, CIS Controls, and MITRE ATT&CK.
• Relevant certifications such as Security+, CySA+, GIAC, CISSP, Microsoft Azure, Palo Alto Networks, AWS, or Qualys.