Senior Cybersecurity Engineer - Penetration Testing & SIEM Integration

San R&D Business Solutions LLC•Austin, TX

1d•Onsite

About The Position

The Senior Cybersecurity Engineer will serve cybersecurity modernization initiatives focused on penetration testing automation and SIEM integration for the firm. This role combines secure software development and hands-on cybersecurity engineering to build scalable automation, enhance penetration testing capabilities, and strengthen SIEM-driven threat detection. The position directly supports the firm's Zero Trust, continuous monitoring, and enterprise security operations initiatives.

Requirements

Bachelor’s degree in Computer Science, IT, or related field (or equivalent experience).
8+ years of experience building security automation and platform integrations.
8+ years of hands-on experience with penetration testing tools and Kali Linux environments.
5–8 years of professional software development experience.
3–5 years of experience in:
Programming (Python, Java, JavaScript, or C#)
REST API development and enterprise system integrations
Scripting (Python, Bash, PowerShell)
Linux system administration
SIEM platforms (Splunk, Sentinel, or equivalent)
Cybersecurity fundamentals and secure coding practices
Strong understanding of:
Security automation and orchestration
API integration
Log pipeline development
Zero Trust principles

Nice To Haves

Experience developing security data pipelines and SIEM integrations.
Experience designing scalable security tool architectures.
Experience with containerization/virtualization (Docker, VMware, cloud labs).
Experience working in regulated or government environments.
Certifications such as:
OSCP / CEH
Splunk Certified Developer
Security+ / CISSP
Linux administration certification

Responsibilities

Security Engineering & Development:
Design and develop secure APIs, microservices, and software components to support penetration testing workflows.
Build integrations between penetration testing tools, vulnerability scanners, and enterprise SIEM platforms.
Develop log ingestion pipelines for normalization and forwarding of security telemetry into Splunk and other SIEMs.
Automate alert enrichment, correlation, and reporting processes.
Support integration of security findings into Governance, Risk, and Compliance (GRC) platforms.
Penetration Testing Enablement:
Deploy and maintain Kali Linux-based penetration testing environments (virtualized and cloud-hosted).
Configure and manage penetration testing toolchains and frameworks.
Develop custom exploit scripts, proof-of-concept code, and automation utilities.
Support red team and application penetration testing engagements.
SIEM & Security Operations Integration:
Develop connectors and APIs for enterprise SIEM integrations.
Implement log parsing, enrichment, and normalization logic.
Collaborate with CSOC teams to align tool development with detection requirements.
Automation & DevOps:
Develop scripts in Python, Bash, PowerShell, or similar languages.
Implement CI/CD pipelines for security tools and integrations.
Maintain repositories, documentation, configuration guides, and operational runbooks.
Ensure compliance with HHSC standards, DIR security controls, and NIST frameworks.