[Hiring] Staff Security Engineer I @Blue Yonder

Role Description

The Cyber Defense Engineering team at Blue Yonder owns the security tooling that protects the organization's multi-cloud estate across nine business units. We are seeking a Staff Security Engineer I to serve as a key contributor across endpoint security, security platforms, cloud security, and automation initiatives. This hands-on engineering role will have primary ownership of our CrowdStrike Falcon platform while supporting critical technologies across our cyber defense stack.

• Own the CrowdStrike Falcon stack end to end.
• Administer the full platform, EDR/NGAV, Identity Protection, Exposure Management, Cloud Security, NGSIEM (LogScale), Fusion SOAR, and Counter Adversary Operations — under our Falcon Complete license.
• Manage sensor health, policies, exclusions, and the sensor update lifecycle across a multi-cloud fleet (VMware, Azure, AWS, GCP, OCI).
• Implement new tools within the cyber defense scope.
• Lead the deployment, integration, and ongoing administration of new security platforms.
• Engineer and maintain data flows.
• Build and maintain log ingestion pipelines into NGSIEM.
• Keep the platform running.
• Own platform health, patching/upgrades, configuration governance, and capacity.
• Diagnose and resolve issues quickly.
• Automate and orchestrate.
• Use Fusion SOAR to eliminate manual toil and streamline provisioning and response workflows.
• Bring AI into the workflow.
• Ease the life of analysts.
• Govern access and configuration.
• Document and communicate.

Qualifications

• 6+ years in security engineering, security administration, or a closely related infrastructure/operations role.
• Hands-on administration experience with CrowdStrike Falcon (or a comparable enterprise EDR/XDR platform).
• Working knowledge of SIEM/log management concepts; ingestion, parsing, normalization, and query.
• Practical experience across at least one major cloud (Azure, AWS, GCP, or OCI).
• Strong troubleshooting instincts and the ability to drive incidents to root cause under pressure.
• Scripting/automation ability (Python, PowerShell, or similar) and comfort working with REST APIs.
• Exposure to email security tooling (e.g., Proofpoint) or other cyber defense platforms.
• Fluency with AI tools in day-to-day work.
• Clear written and verbal communication.

Requirements

• Experience with SOAR/orchestration platforms (Fusion SOAR or comparable).
• Familiarity with identity protection, cloud security posture (CSPM/CNAPP), or exposure/vulnerability management tooling.
• Experience onboarding and standing up new security tools from POC to production.
• Deception technology implementation experience.
• Experience applying AI/ML or AI-driven security tooling.
• Relevant certifications — CrowdStrike (CCFA/CCFR/CCFH), cloud (AZ-500, AWS Security, GCP Security), or security fundamentals (Security+, GCIH, GCED).

Benefits

• Comprehensive Medical, Dental and Vision.
• 401K with Matching.
• Flexible Time Off.
• Corporate Fitness Program.
• A variety of voluntary benefits such as Legal Plans, Accident and Hospital Indemnity, Pet Insurance, and much more.