Staff CyberSecurity Engineer

Southern Glazer’s Wine and Spirits, LLC•Addison, TX

About The Position

The Staff Cybersecurity Engineer is a strategic team member responsible for safeguarding SGWS’s digital assets through the development, enhancement, and maintenance of highly complex security systems. This role involves working closely with leadership in the design and implementation of cutting-edge security measures, architecting secure networks, and countering sophisticated threats such as hacking and malware. The Staff Cybersecurity Engineer manages the analysis of network, server, and application logs to detect security incidents, conducts advanced intrusion detection, and ensures the organization remains resilient against evolving cyber threats. This role governs multiple cross-functional initiatives, serves as a trusted internal advisor, and applies extensive knowledge to complete complex assignments with significant organizational impact. Additionally, the Staff Cybersecurity Engineer mentors and coaches other engineers, contributing to the technical aspects of the service or platform with minimal guidance, and helps drive innovation in security practices across the organization. This role also ensures compliance with regulatory standards and champions continuous improvement in security practices.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, or equivalent combination of education and work experience.
Typically, 8 – 10+ years of experience in cybersecurity, information security, or related field.
At least 2 years of hands-on experience managing EDR configurations, deployments, and automation in both on-premises and cloud environments.
2 or more years of experience of utilizing threat intelligence tools and frameworks
2 or more years of hands-on experience with an enterprise SIEM solution
2 or more years of hands-on experience utilizing Email security platforms
2 or more years of hands-on experience actively leading and conducting threat hunting operations
Native-level proficiency/fluent in English.
Experience in DevOps and Agile technology environments.
Must be willing to participate in an on-call rotational schedule

Nice To Haves

Certified Information Systems Security Professional (CISSP) or equivalent certification.
GIAC or Offensive Security Certifications – GPEN, GCIH, GREM, etc.
Experience in both red team and blue team operations demonstrating expertise in offensive and defensive security strategies
Experience in Computer Forensics and eDiscovery
Experience with cloud security technologies and platforms
Experience managing complex, cross-functional cybersecurity initiatives.
Strong problem-solving skills and ability to work independently with minimal supervision.
Excellent communication and interpersonal skills.
Proven ability to mentor and guide both junior and senior team members.
Proven knowledge of scripting languages (e.g., Perl, Python, and PowerShell).
Strong expertise in operating systems, including Windows, Mac, and Linux.
Comprehensive understanding of database security, data structuring, storage, and dissemination.
Experience with network security, including VPNs, firewalls, network monitoring, and intrusion detection systems.
Significant experience in incident response and managing security breaches.

Responsibilities

Manage, monitor, and respond to threats from EDR and SIEM solutions.
Assist with computer forensic and eDiscovery requests as needed
Design comprehensive incident response playbooks ensuring well-structured and effective responses to security incidents
Aggressively automate repeated tasks to allow the team to scale with the organization’s growth
Design and implement security solutions for intrusion detection and notification, security auditing, alerting and response, virus detection and removal, password complexity enforcement, and media protection.
Validate baseline security configurations for operating systems, applications, and networking.
Provide responsive support for escalating problems from System Administrators or other Engineers.
Perform capacity and future growth planning of the enterprise security infrastructure to ensure a highly available security environment.
Troubleshoot and evaluate risk management processes; assess and mitigate risks.
Apply laws, regulations, policies and ethics in daily practice.
Evaluate cyber threats and vulnerabilities.
Respond to cybersecurity incidents.
Create test plans, execute system tests, analyze results, coordinate feedback of results, and fix problems as needed.
Research, design, and implement cyber security solutions for organization systems and products that comply with all applicable security policies and standards.
Examine network, server, and application logs to determine trends and identify security incidents.