Information Security Engineer IV

Capital Group•San Antonio, TX

13d•$131,003 - $270,278•Hybrid

About The Position

The Security Operations Engineer is responsible for designing, integrating, operating, and continuously improving enterprise security platforms and services. This role ensures the availability, performance, and resilience of security capabilities through proactive monitoring, incident management, SLA adherence, capacity planning, and participation in 24x7 support processes. The engineer partners with cybersecurity, infrastructure, application, and operations teams to strengthen security visibility, operational resilience, and the organization’s overall security posture. The successful candidate possesses strong technical knowledge in security operations, incident response, threat detection, security monitoring, and automation, with a passion for identifying and mitigating cybersecurity risks. The role also requires the ability to develop and communicate meaningful security and operational metrics, dashboards, and executive reports that support informed decision-making across technical and non-technical audiences.

Requirements

At least 10 years in DevSecOps, cybersecurity, with hands-on experience supporting enterprise security technologies, security operations, incident response, threat detection, and/or risk management initiatives.
Experience integrating security platforms and applications using APIs, web services, event-driven architecture, identity protocols, and security tool ecosystems.
Proven experience operating and supporting enterprise security products and solutions.
Advanced scripting and automation skills using Python, PowerShell, REST APIs, infrastructure-as-code, or similar technologies to automate security and operational workflows.
Demonstrated expertise in optimizing security alerting mechanisms and enhancing operational processes to improve efficiency and effectiveness.
Experience building and presenting operational and security metrics, KPIs, dashboards, and executive reporting for both technical and non-technical audiences.

Responsibilities

Design, implement, and maintain security platform integrations with enterprise applications, cloud services, identity providers, and security tools to improve visibility, automation, and overall security effectiveness.
Manage the day-to-day operational health of security platforms, including service availability, monitoring, incident management, SLA adherence, capacity planning, and participation in 24x7 support processes.
Develop and maintain advanced automation solutions, scripts, and workflows to streamline security operations, reduce manual effort, and improve response times.
Optimize security operations by enhancing log onboarding processes, alert correlation, event normalization, alert deduplication, and detection tuning to improve signal-to-noise ratio and operational efficiency.
Create and deliver operational, service, and security metrics dashboards and reports tailored to technical teams, leadership, and business stakeholders to support data-driven decision making.
Partner with cybersecurity, infrastructure, application, and engineering teams to continuously improve the organization's security posture, operational resilience, and security monitoring capabilities.