Cybersecurity and Network Security Engineer

PROPELEX CYBERSECURITY

CYBERSECURITY AND NETWORK SECURITY ENGINEER

Full-Time | Exempt | Hybrid / Client Site

Experience Required: 7–10 Years

Position Summary

Propelex Cybersecurity is a leading cybersecurity consulting firm dedicated to helping organizations of all sizes build resilient, mature security programs. We partner with clients across industries to assess, implement, and operationalize security solutions that address today's most complex threats.

We are seeking a skilled Cybersecurity and Network Security Engineer to join our consulting practice and deliver hands-on security engagements across our client portfolio. In this role, you will work directly with client teams to implement, configure, and operate security tools and programs spanning network security, identity management, vulnerability management, endpoint detection, and security operations.

Key Responsibilities

Network Security & Firewall Management

●      Configure and manage Palo Alto Networks (PAN-OS, Panorama) and Check Point (SmartConsole) firewalls across client environments.

●      Implement network segmentation, perimeter controls, and Zero Trust Network Access (ZTNA).

●      Optimize firewall rule sets and support lifecycle management for client network security programs.

●      Deliver remediation recommendations and hands-on implementation support.

Identity & Access Management (IAM) and Privileged Access Management (PAM)

●      Deploy and configure PAM solutions (e.g., CyberArk, BeyondTrust, Delinea) to secure privileged credentials and enforce session monitoring.

●      Implement SSO, MFA, and RBAC frameworks within client environments.

●      Integrate IAM ecosystems with directory services to support secure user lifecycle management.

Vulnerability Management

●      Lead end-to-end deployment and configuration of Tenable One, Tenable.sc (Security Center), and Tenable OT across complex client environments, including on-premises, hybrid, and operational technology (OT/ICS) networks.

●      Design and implement Tenable scan zone architecture, scanner placement, and credential management to ensure complete asset coverage across IT and OT environments.

●      Configure and tune Tenable OT for passive and active discovery of industrial control systems (ICS), SCADA devices, and OT assets, ensuring non-disruptive scanning in production OT environments.

●      Build and manage Tenable.sc dashboards, reports, and assurance report cards (ARCs) tailored to each client's risk appetite and compliance requirements.

●      Leverage Tenable One's Exposure Management capabilities — including Asset Inventory, Lumin Exposure View, and Attack Path Analysis — to provide clients with prioritized, risk-based remediation guidance.

●      Establish SLA-driven remediation workflows and vulnerability tracking processes, integrating Tenable data with ticketing systems (e.g., ServiceNow, Jira) where applicable.

●      Correlate vulnerability findings with current threat intelligence and exploitability data (CVSS, EPSS, Tenable VPR) to prioritize remediation based on actual risk.

●      Deliver clear executive and technical vulnerability reports, trend analysis, and KPI dashboards for client leadership teams.

●      Support clients through Tenable platform upgrades, license management, and ongoing health checks to maintain optimal scanner performance.

Extended Detection & Response (XDR/EDR) and SIEM

●      Deploy, configure, and manage CrowdStrike Falcon across client environments, including Falcon Prevent (NGAV), Falcon Insight (EDR), Falcon Discover, and Falcon Spotlight — tuning prevention policies, exclusions, and sensor deployment at scale.

●      Implement and optimize SentinelOne Singularity platform, including Deep Visibility, Ranger network discovery, and Storyline-based detection tuning to reduce false positives and improve signal quality.

●      Build and maintain detection rules, custom IOC-based indicators, and behavioral analytics within CrowdStrike and SentinelOne to identify client-specific threat patterns.

●      Deploy and administer SIEM platforms — including Splunk Enterprise/Splunk Cloud and Microsoft Sentinel — covering log source onboarding, data normalization, parsing, and field extraction.

●      Develop and maintain Splunk SPL searches, correlation searches, alerts, and dashboards; build Microsoft Sentinel KQL analytics rules, workbooks, and automation playbooks.

●      Manage log ingestion pipelines, ensure completeness of coverage across endpoint, network, identity, and cloud log sources, and establish data retention and tiering policies.

●      Design and implement SOAR playbooks (Splunk SOAR / Palo Alto XSOAR) to automate alert triage, enrichment, and response workflows, reducing mean time to respond (MTTR).

●      Conduct structured threat hunting exercises within client environments using XDR telemetry, SIEM data, and threat intelligence feeds to identify undetected adversary activity.

●      Support client SOC teams with incident response — containing endpoints, collecting forensic artifacts, and producing clear incident timelines and post-incident reports.

●      Integrate XDR/EDR and SIEM platforms with threat intelligence sources, vulnerability management data, and identity systems to enrich detections and reduce analyst workload.

Active Directory Security

●      Assess and harden client Active Directory environments, including Group Policy and tiered administration.

●      Identify and remediate common AD attack paths (e.g., Kerberoasting, pass-the-hash, DCSync).

●      Support Azure AD / Entra ID deployments and Conditional Access policy configuration.

Required Qualifications

●      7–10 years of progressive experience in cybersecurity and network security engineering or operations.

●      Extensive hands-on experience implementing and managing Tenable One, Tenable.sc (Security Center), and Tenable OT in enterprise or consulting environments — this is a core requirement.

●      Deep understanding of Tenable OT architecture, passive/active scanning methodologies, and safe OT scanning practices in ICS/SCADA environments.

●      Proven ability to build and manage Tenable.sc dashboards, ARCs, and reporting workflows aligned to client compliance frameworks.

●      Experience with Tenable One Exposure Management, including Lumin, Attack Path Analysis, and asset inventory at scale.

●      Hands-on experience deploying and administering CrowdStrike Falcon (Prevent, Insight, Discover, Spotlight) and/or SentinelOne Singularity in enterprise environments.

●      Demonstrated experience with Splunk (SPL, correlation searches, dashboards) and/or Microsoft Sentinel (KQL, analytics rules, workbooks) in a production SOC or consulting context.

●      Experience building SOAR playbooks for alert automation and incident response workflows (Splunk SOAR, Palo Alto XSOAR, or equivalent).

●      Hands-on expertise with Palo Alto Networks and Check Point firewall platforms.

●      Demonstrated experience implementing PAM and IAM solutions at enterprise scale.

●      Strong knowledge of Active Directory security, attack techniques, and hardening practices.

●      Solid understanding of TCP/IP networking, DNS, PKI, VPNs, and cloud networking (AWS, Azure, GCP).

Preferred Qualifications

●      Active certifications such as CISSP, CISM, GIAC (GCIA, GCFA, GCFE), Tenable Certified Security Engineer (TCSE), CrowdStrike CCFA/CCFR, Splunk Core Certified Power User, or equivalent.

●      Tenable-specific certifications or documented Tenable implementation experience strongly preferred.

●      Prior experience in a cybersecurity consulting or MSSP environment.

●      Familiarity with compliance frameworks including SOC 2, PCI DSS, HIPAA, CMMC, NERC CIP, or ISO 27001.

●      Experience integrating Tenable and SIEM platforms with ticketing and ITSM systems (ServiceNow, Jira).

●      Scripting experience in Python, PowerShell, or Bash for detection engineering, log parsing, or vulnerability management automation.

Core Competencies

Technical Execution:
Delivers hands-on implementation with precision and follows through to successful completion.

Communication:
Clearly explains technical findings and recommendations to both technical and non-technical audiences.

Adaptability:
Shifts effectively across multiple client engagements in a fast-paced consulting environment.

Client Focus:
Builds positive working relationships with client teams and earns trust through reliable delivery.

Ownership:
Self-directed and accountable; drives tasks from start to finish without heavy oversight.

Work Environment & Travel

This is a client-facing consulting role at Propelex Cybersecurity. Travel to client sites is required and will vary by engagement, ranging from occasional to frequent based on project needs and client location. The role is otherwise performed remotely or from a Propelex Cybersecurity office. Reasonable accommodations will be made for individuals with disabilities in compliance with applicable law.

Equal Opportunity Statement

Propelex Cybersecurity is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law.