Security Engineer

Shermco Industries, Inc. • Irving, TX

5d • $110,000 - $125,000 • Hybrid

About The Position

Shermco is seeking a hands-on Security Engineer to own day-to-day Security Operations Center (SOC) workflows, threat management, and core security infrastructure. The role has operational ownership of incident monitoring, detection, and response across network, endpoint, and email environments. The engineer will use AI-assisted security tools and automation to improve threat analysis, accelerate investigations, streamline repetitive tasks, and enhance SOC efficiency.

The position is based in Irving, Texas, with a hybrid schedule requiring three days onsite each week. Candidates must be legally authorized to work in the United States without current or future employer sponsorship; Shermco does not provide visa sponsorship. The advertised pay range is USD $110,000–$125,000 per year.

Requirements

• 4–7+ years of dedicated hands-on experience in cybersecurity, security operations, or threat engineering.
• Strong experience configuring, administering, and troubleshooting Palo Alto Networks firewalls and Panorama.
• Direct experience managing enterprise EDR platforms, such as Palo Alto Cortex XDR, CrowdStrike, Defender for Endpoint, or SentinelOne.
• Proven experience configuring and tuning advanced email security platforms, such as Proofpoint, Mimecast, Defender for Office 365, or Abnormal.
• Deep understanding of TCP/IP, the OSI model, DNS, Active Directory and identity-access concepts, and common attack vectors, including the MITRE ATT&CK framework.
• Ability to stay calm under pressure during active incidents, strong technical troubleshooting skills, and clear communication when reporting risks to IT leadership.
• Legally authorized to work in the United States without current or future employer sponsorship.

Nice To Haves

• PCNSE certification is a strong plus.
• Preferred certifications: Palo Alto Networks Certified Network Security Engineer (PCNSE), GIAC certifications (GCIH, GCFA, or GCDA), or CompTIA Security+ or CySA+.

Responsibilities

• Lead daily SOC monitoring, alert triage, log analysis, and incident investigations; manage incident response from initial detection through root-cause remediation and post-incident reporting.
• Manage, tune, and maintain Palo Alto firewalls, security policies, SSL decryption, App-ID/User-ID configurations, and threat-prevention features.
• Own deployment, agent health, policy tuning, and threat hunting across the enterprise EDR platform.
• Oversee email security gateway solutions to defend against phishing, Business Email Compromise (BEC), account takeover attempts, and malicious attachments or URLs.
• Refine SIEM/XDR alert rules, reduce false positives, and automate manual incident-response playbooks.
• Conduct recurring vulnerability scans, prioritize patching with IT operations, and assess emerging threat intelligence for environmental risks.
• Maintain incident-response runbooks, threat models, architectural diagrams, and operational procedures to ensure continuous coverage.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed