Security Engineer

Neptune Technology Group•Duluth, GA

1d•Hybrid

About The Position

As a Security Engineer within Neptune's Security Operations Center (SOC), you will design, implement, administer, and optimize Neptune's cybersecurity technologies while serving as a technical leader within the SOC. This role combines security engineering with operational security by supporting incident detection, investigation, response, and remediation while continuously improving Neptune's security capabilities through automation, tool integration, detection engineering, and process enhancement. The Security Engineer partners closely with SOC Analysts, IT Operations, Infrastructure, Cloud, and Engineering teams to implement and maintain security solutions, tune detections, develop response playbooks, support vulnerability management, and enhance security monitoring across the enterprise — providing advanced technical expertise during cybersecurity incidents and driving continuous improvements to strengthen Neptune's overall security posture.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
2–5 years of experience in cybersecurity, security operations, incident response, or related technical field
Experience investigating security alerts, detections, and cybersecurity incidents
Experience working in a Security Operations Center (SOC) environment
Experience with SIEM and EDR platforms
Understanding of security engineering concepts, including detection engineering, automation, and security tool administration
Strong analytical, troubleshooting, and problem-solving skills
Strong written and verbal communication skills

Nice To Haves

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field
2–5 years of experience in Security Operations, Cybersecurity, Incident Response, Vulnerability Management, or Information Technology
Experience with SIEM platforms such as Google SecOps, Chronicle, Splunk, QRadar, Microsoft Sentinel, or similar technologies
Experience with Endpoint Detection and Response (EDR) platforms such as CrowdStrike Falcon or Microsoft Defender
Familiarity with the MITRE ATT&CK Framework, threat hunting, and threat intelligence methodologies
Experience supporting vulnerability management programs and remediation activities
Knowledge of Windows, Active Directory, Microsoft Entra ID, networking fundamentals, and cloud security concepts
Experience working with AWS and/or Azure environments
Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO 27001, and security best practices
Experience with scripting or automation using PowerShell, Python, or similar languages
Security+ certification
CySA+ certification
GSEC certification
GCIH certification
GCIA certification
GCED certification
CISSP (Associate or Full) certification
SC-200 certification
SC-100 certification
CrowdStrike Certifications
Google SecOps Certifications
AWS or Azure Security Certifications

Responsibilities

Design, configure, implement, and maintain security platforms including SIEM, EDR/XDR, SOAR, Identity and Access Management (IAM), Data Loss Prevention (DLP), Vulnerability Management, and Cloud Security solutions
Evaluate, test, and deploy new security technologies, including Proof of Concept (POC) evaluations
Develop automation and orchestration workflows to improve operational efficiency
Support cloud security and Zero Trust initiatives across the enterprise
Develop and tune security detections, correlation rules, and dashboards to improve threat detection capabilities and reduce false positives
Perform proactive threat hunting and analyze security telemetry across endpoint, network, identity, cloud, and SIEM platforms
Identify opportunities to improve detection and response capabilities across the environment
Monitor emerging threats, vulnerabilities, and industry best practices to inform detection strategy
Provide technical leadership during investigation, containment, eradication, and recovery for complex and escalated security incidents
Investigate advanced cyber threats and complex security alerts
Collect and analyze forensic artifacts, logs, and endpoint telemetry during investigations
Participate in the on-call rotation and provide advanced technical support during critical security incidents
Support root cause analysis and post-incident reviews
Validate vulnerability findings and coordinate remediation activities with IT Operations, Infrastructure, and Engineering teams
Implement security controls to address identified risks
Track and support remediation efforts across the vulnerability management program
Partner with SOC Analysts, IT Operations, Infrastructure, Cloud, and Engineering teams to implement and maintain security solutions
Develop response playbooks, engineering standards, and operational procedures
Provide mentorship and technical guidance to SOC Analysts
Create and maintain technical documentation supporting SOC operations
Collaborate with Neptune's MSSP and third-party security partners on engineering and investigation initiatives
Support compliance initiatives aligned with NIST CSF, CIS Controls, ISO 27001, and Roper Cybersecurity requirements
Recommend improvements that strengthen Neptune's security posture, resilience, and compliance
Assist with audit requests, evidence collection, and security documentation