Lead Security Engineer / Architect

Job Title: Security Architect Consultant / Senior Security Engineer

Work Setup: Remote (Must participate in a monthly on-call rotation supporting a 24x7 SOC)

Duration: 12 months + potential ext

We’re seeking an experienced Security Architect-Consultant / Senior Security Engineer to support a large enterprise cybersecurity environment serving multiple state agencies.

This is a highly hands-on role focused on security engineering, cybersecurity automation, Python development, Linux systems, IAM, security platform integrations, and SOC operations.

What You’ll Do

• Design, develop, deploy, and support enterprise security automations and custom security tools
• Build Python-based scripts, applications, APIs, dashboards, CLI utilities, and integrations
• Develop automated workflows for:
• Alert enrichment and triage
• Incident response and containment
• Case management and notifications
• Vulnerability/CVE enrichment and prioritization
• Integrate enterprise security technologies using REST APIs, SDKs, JSON, YAML, and web services
• Support IAM, including provisioning, deprovisioning, RBAC, service accounts, authentication, and authorization
• Deploy, configure, patch, monitor, and troubleshoot Linux-based security systems and Docker environments
• Support security platforms including SIEM, SOAR, XDR, vulnerability management, endpoint security, email security, DSPM, ASM, network security, cloud security, logging, monitoring, and threat intelligence
• Troubleshoot complex issues across applications, operating systems, security platforms, networks, identity services, and integrations
• Support SOC analysts, security engineers, incident responders, and agency stakeholders

Required Qualifications

• Broad hands-on Security Engineering experience
• Strong Python development and cybersecurity automation experience
• Advanced Linux administration and troubleshooting
• Experience with PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs
• Experience integrating enterprise security technologies and platforms
• Strong troubleshooting skills across applications, networks, operating systems, identity, and security systems
• Experience supporting large enterprise IT/security environments
• Bachelor’s degree in IT, Computer Science, Software Engineering, Information Security, or related field — or equivalent relevant experience
• Approximately 8 years of relevant professional experience, including experience supporting large IT environments, security systems, software development, and/or system deployments

Preferred Experience with:

• Palo Alto Networks
• Proofpoint
• Tenable
• Cribl
• WhatsUp Gold / WUG
• Docker / containerized security applications
• IAM and access-control technologies
• SIEM / SOAR / XDR
• Vulnerability management
• Enterprise SOC or incident response environments
• Multi-tenant, shared-services, MSSP, or large enterprise security environments
• Preferred certifications include CISSP, Security+, GIAC, Linux, Python, cloud, IAM, or other relevant cybersecurity certifications.

Work Arrangement

• 100% Remote — all work must be performed within the contiguous United States
• Strong preference for candidates currently residing in South Carolina who can assist with occasional in-state equipment or hardware support
• Core business hours are approximately 8:30 AM–5:00 PM ET
• Must participate in a monthly on-call rotation supporting a 24x7 SOC
• Occasional after-hours maintenance and incident escalation support may be required