[Hiring] Senior Cybersecurity Engineer @The Redesign Group

Role Description

The Senior Cybersecurity Engineer is a hands-on engineering role in our Managed Security Services team. You will own the configuration, tuning, and operational health of the security platforms protecting our clients:

• Tuning detections
• Onboarding log sources
• Driving vulnerability remediation to closure
• Acting as technical lead when an incident is live

You will work alongside a team of security staff, supported by a global network operations center that handles first-line monitoring and triage.

Our core platforms are CrowdStrike Falcon, Rapid7 InsightIDR and InsightVM, and the Microsoft security stack, and experience with Palo Alto Networks is a plus. You will also help shape how we secure AI and agentic systems, including:

• Agents with genuine access to production environments
• Authorization, monitoring, and adversarial testing

We do not expect you to have used every tool across our client base, but we do expect real depth in:

• Endpoint detection and response
• SIEM
• Vulnerability management

Qualifications

• Hands-on ownership of enterprise endpoint detection and response and of a SIEM and vulnerability management platform.
• Hands-on experience securing and administering Microsoft identity and endpoint services: Entra ID, Conditional Access, Intune, and Microsoft Defender.
• Cloud security experience in at least one major provider (Azure, AWS, or GCP) covering identity, workload, and posture management.
• Automation ability using AI tooling, scripting (Python, PowerShell, or an equivalent), and direct work against vendor APIs.
• Experience writing formal root cause analyses and working inside a structured change management process.
• Strong analytical and troubleshooting instincts, clear client-facing communication, and the ability to work independently across many client environments at once without losing track of any of them.

Requirements

• Administer, configure, and tune core security platforms across multiple client tenants, owning configuration baselines, policy alignment, and platform health.
• Build and refine detection logic, reduce false positives, and create the operational playbooks that turn a detection into a repeatable response.
• Onboard and troubleshoot SIEM log sources, and diagnose and repair broken ingestion and API integrations between security, monitoring, and ticketing platforms.
• Triage alerts and events, serve as a technical lead during live incidents alongside clients, internal teams, and third-party incident response firms.
• Run vulnerability scanning and reporting, prioritize by real exploitability rather than raw severity score, and drive remediation to closure with engineering teams.
• Define and enforce the controls around AI systems that hold real access to internal and client environments, including tool authorization, activity monitoring, and adversarial testing.
• Automate recurring security operations work using scripting and platform APIs.
• Own the technical relationship with our security and managed detection vendors, and judge whether what we are getting matches what we bought.
• Write formal root cause analyses, execute changes through structured change management, and maintain documentation of baselines, incidents, and tuning decisions that client audits rely on.
• Tailor configurations to each client environment and give stakeholders clear status reporting, executive-level summaries, and practical best-practice guidance.
• Mentor junior engineers and work with infrastructure, network, and service delivery teams so security fits the wider environment rather than sitting beside it.

Benefits

• Medical Insurance
• Dental Insurance
• Vision Insurance
• 401(k) retirement plan with company match (annual dollar cap applied)
• Flexible time off plan
• 15 paid holidays
• Sick leave (amount varies by state requirements and is at least the minimum required by any state)
• Short-term and long-term disability
• Life insurance
• Paid parental leave