Cybersecurity Engineer

Centersquare•Coppell, TX

22d

About The Position

We are seeking an experienced and adaptable Cybersecurity Engineer to support and mature Csquare’s security program. This role is hands-on and multidisciplinary, requiring close collaboration across engineering, infrastructure, and operations teams. The successful candidate will strengthen detection capabilities, optimize security platforms, and respond to incidents that span hybrid, multi-tenant, and cloud-adjacent environments. This position offers significant influence over how security is engineered and operated within a colocation model, where uptime, customer trust, regulatory compliance, and operational discipline are paramount. The role is well-suited to an engineer who values depth, ownership, and practical security outcomes.

Requirements

Strong understanding of fundamental computing and security concepts, including: Networking (TCP/IP, DNS, routing, switching), Windows and Linux operating systems, Identity and privileged access management.
Demonstrated ability to develop meaningful detection logic using query languages, event correlation, and behavioral analysis.
Experience working with platforms such as SIEM, EDR/XDR, SOAR, Defender, MDR, and network security tooling, with an emphasis on engineering, tuning, and optimization.
Prior hands-on experience in cybersecurity engineering, security operations, incident response, or threat detection.
Comfort leading technical investigations involving critical infrastructure or administrative access.

Nice To Haves

Experience with scripting and automation (e.g., PowerShell, Python, Bash) and integrating tools via APIs is highly desirable.
Operational Mindset: Understands the balance between strong security controls, reliability, and customer service commitments.
Adaptability: Comfortable operating across corporate IT, data center operations, and evolving threat scenarios.
Analytical Curiosity: Consistently seeks root cause and systemic improvements rather than surface-level fixes.
Ownership: Proactively identifies and resolves security gaps, particularly those affecting shared or critical infrastructure.
Clear Communicator: Communicates security risk and findings clearly to leadership and non-security stakeholders.
Collaborative: Works effectively with IT, network, facilities, compliance, and external partners without siloed thinking.

Responsibilities

Own the configuration, tuning, and lifecycle management of security platforms supporting corporate IT and data center operations, including SIEM, XDR/EDR, MDR, vulnerability management, and the Microsoft Defender ecosystem.
Engineer efficient, purposeful security telemetry pipelines focused on actionable signals rather than raw log volume.
Integrate alerts and telemetry across identity systems, endpoints, network infrastructure, virtualization platforms, and cloud services to enable cohesive visibility.
Customize and harden security tools to reflect operational realities of colocation environments, including shared infrastructure, management networks, and customer demarcation boundaries.
Partner with key stakeholders across the company to ensure security controls are customized for our environment.
Design, implement, and maintain high-confidence detection logic across corporate and data center environments.
Treat detections as code—versioned, reviewed, validated, and continuously improved.
Evaluate detection coverage with a focus on threats relevant to the business (e.g., compromised admin access, management plane abuse, insider risk, and lateral movement).
Participate in end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident analysis.
Investigate identity compromise, phishing, endpoint alerts, anomalous network activity, and suspicious behavior within management or control environments.
Perform root-cause analysis and drive durable corrective actions to reduce recurrence and operational risk.
Collaborate with infrastructure, network, and operations teams to automate repetitive security and response tasks.
Improve response workflows to balance security rigor with business needs and evolving threats.
Reduce alert fatigue and operational noise through improved tuning, enrichment, and prioritization.
Support internal security assessments, tabletop exercises, and incident simulations aligned to colocation and data center threat scenarios.
Assist with validation of controls supporting customer assurance requirements and industry frameworks (e.g., SOC 1/2, ISO 27001).
Contribute to continuous improvement initiatives related to system hardening, visibility, and detection capabilities.