NETSEC Engineer

Company Overview:
At Cypher Analytics, we take immense pride in being 100% employee-owned! Our unique structure fosters a collaborative and innovative environment where everyone's contributions matter. We share a passion for excellence, teamwork, and driving meaningful results for our clients. Joining us means becoming an integral part of a supportive and empowering community.

Position Summary:
The NETSEC Engineer provides cybersecurity engineering, host security configuration, vulnerability assessment, and security automation support across both Linux and Windows enterprise/tactical environments. This role is responsible for designing, implementing, and maintaining security monitoring capabilities, vulnerability scanning processes, endpoint protection configurations, and host hardening measures.

Must Have Requirements:

• Bachelor’s degree in an engineering discipline
• Active Secret level security clearance (or higher)
• Security + Certification
• 3-7 years of professional experience in cybersecurity engineering, host security configuration, vulnerability assessment, and security automation support within DoD or Navy environment.
• Strong hands-on experience administering and securing RHEL and Windows Server environments
• Direct experience engineering SIEM/SOAR solutions (Splunk, Sentinel, ArcSight, etc.)
• Experience developing security automation (Python, Bash, PowerShell, or similar)
• Experience with Trellix ESS (formerly McAfee HBSS) in an engineering, not in an administrative capacity.
• Support various programs with integration of endpoint security capabilities
• Proficiency with ACAS as an engineering user
• Experience using GitLab/GitHub for version control and automation workflows
• Understanding of cybersecurity frameworks, DoD security requirements, and vulnerability management processes
• Ability to troubleshoot complex OS, security tool, and integration issues
• Strong analytical, documentation, and communication skills

Duties and Responsibilities:

• Engineer and maintain secure configurations for RHEL (7+) and Windows Server environments (2019–2025+)
• Apply system hardening standards (e.g., STIGs), patch management processes, and secure baselines
• Develop, tune, and maintain SIEM/SOAR rules, use cases, dashboards, and automated response playbooks (Sentinel and Splunk preferred)
• Configure, manage, and troubleshoot log ingestion pipelines and data normalization processes
• Engineer, configure, and maintain ACAS vulnerability scanning capabilities, including credentialed scans, scan zones, and scan policy tuning
• Analyze vulnerability findings, validate scan results, and collaborate with system owners to drive remediation
• Support Trellix ESS/HBSS endpoint security engineering—including policy development, rule tuning, and signature configuration
• Use GitLab/GitHub to manage automation scripts, configuration files, and security engineering workflows
• Develop or maintain automation using scripts, pipelines, or tools to enhance detection, scanning, and reporting workflows
• Support cyber defense teams by improving detection fidelity, reducing false positives, and enhancing visibility into host and network activity
• Provide technical recommendations for system hardening, vulnerability remediation, and SIEM/SOAR integration
• Participate in security assessments, audits, and readiness reviews; prepare supporting documentation as required
• Maintain familiarity with CMPro workflows
• Experience with Spork/Spork+

Cypher Analytics offers to eligible employees:

• Employee Covered Medical, Dental, LTD, and Life Insurance
• 401(k) Matching and Employee Stock Ownership Program
• Training and Teambuilding Events
• Annual Tuition, Certification and Training Reimbursement

Pay: $120,000.00 - $165,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Retirement plan
• Tuition reimbursement
• Vision insurance

Application Question(s):

• How many years of experience do you have engineering SIEM/SOAR Solutions?

Education:

• Bachelor's (Required)

License/Certification:

• CompTIA Security+ (Required)

Security clearance:

• Secret (Preferred)

Work Location: In person