Position Title: Cyber Security Engineer
Location Information
Remote
Position Responsibilities:
We are seeking a skilled Cyber Security Engineer to support a critical infrastructure and utilities environment. This position focuses on deploying, administering, and optimizing an enterprise-scale security technology stack in both IT and OT environments. The ideal candidate will have experience with a multi-domain security ecosystem—including endpoint protection, identity security, data governance, network security, and observability solutions—and be prepared to operate in a highly regulated environment.
Key responsibilities include:
- Administer and optimize the CrowdStrike Falcon platform, including the Identity Protection module with Active Directory integration
- Manage and enhance Varonis data security capabilities, including data discovery, access governance, and insider threat detection
- Configure, maintain, and troubleshoot Palo Alto firewalls and GlobalProtect VPNs to ensure secure network access across IT and OT environments
- Support and expand Guardicore (Akamai) microsegmentation policies to help reduce lateral movement and safeguard critical workloads
- Build and optimize Cribl pipelines for efficient log routing, enrichment, and data reduction for use with SIEM and security analytics platforms
- Collaborate closely with SOC, architecture, and IT teams to align security tools and processes with operational and compliance requirements
- Contribute to technical documentation, runbooks, and continuous improvement of the security stack and practices
- Provide technical expertise in incident response activities related to managed security platforms
Essential Skills, Experience
To succeed in this role, you should demonstrate:
- At least 7 years of professional experience in cybersecurity engineering or infrastructure security roles
- Direct expertise with CrowdStrike Falcon, particularly leveraging the Identity module and integrating with Active Directory
- Proficiency with Varonis for data governance and threat detection
- Experience configuring, maintaining, and optimizing Palo Alto Networks firewalls (Panorama experience preferred) and GlobalProtect VPNs
- Experience with Guardicore (Akamai Segmentation) or similar microsegmentation technologies
- Hands-on familiarity with Cribl Stream or Cribl Edge for data pipeline and log management in support of security analytics
- Strong understanding of Active Directory security concepts, including Kerberos, LDAP, and privileged access management
- Ability to work effectively in cross-functional enterprise environments, supporting both IT and OT systems
Qualifications:
- Experience supporting security within critical infrastructure, utilities, energy, or OT/ICS environments is highly desired
- Familiarity with compliance frameworks, especially NERC CIP, is preferred
- Relevant certifications are a plus, such as:
- Palo Alto PCNSE
- CrowdStrike CCFA / CCFR
- AWS or general cloud security certifications
- Expertise in the following tools and technologies:
- CrowdStrike Falcon (Endpoint & Identity Protection)
- Varonis Data Security Platform
- Palo Alto Networks (Firewalls, Panorama, GlobalProtect)
- Guardicore (Akamai Segmentation)
- Cribl (Stream / Edge)
- Active Directory / Identity Security
- SIEM and enterprise logging platforms
If you are a passionate security engineer ready to make an impact in a complex and regulated environment, we invite you to apply and join a team committed to safeguarding critical infrastructure.
ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities.
Equal Employment Opportunity is The Law
This Organization Participates in E-Verify