Cybersecurity Senior Engineer I

Below is a concise, easy‑to‑read snapshot of the Cybersecurity Engineer opportunity at Armanino. Use it as a quick reference when you’re reviewing the posting, tailoring your résumé, or preparing for an interview.

---

📌 Role Overview

• Title: Cybersecurity Engineer (Security Operations / Cloud Security)
• Location: Flexible (remote / hybrid options) – specific compensation ranges vary by state (see “Compensation” section)
• Team: Works across infrastructure, networking, DevOps, and advisory groups to embed security into every layer of the firm’s technology stack.

---

🛠️ Core Responsibilities

Area	Key Tasks
Cloud Security	• Design & implement controls in Azure & AWS (native & third‑party) • Deploy Microsoft Defender, Sentinel, Purview, Entra ID • Build IaC (Terraform/ARM/CloudFormation) & automation (PowerShell, Python) • Define & enforce cloud security policies, posture monitoring, mis‑configuration remediation
Network Security	• Configure firewalls, IDS/IPS, DLP, proxies • Implement segmentation, micro‑segmentation, secure VPN/remote access • Design secure network architecture for M&A integrations • Monitor traffic for threats, create detection rules
Security Operations	• Tune SIEM (alerts, dashboards, reports) • Develop incident‑response playbooks & automation • Conduct threat hunting, log/forensic analysis • Coordinate vulnerability assessments & pen‑test activities
Tooling & Integration	• Deploy & maintain EDR, CASB, vulnerability scanners • Integrate security tools with ITSM & automation platforms • Document configurations & procedures
Collaboration & Governance	• Partner with infrastructure, networking, DevOps teams • Apply NIST, CIS, and other frameworks • Communicate technical concepts to both technical and business audiences

---

✅ Minimum Qualifications

• Experience: ≥ 3 years in cybersecurity engineering or security operations.
• Hands‑on: Implementation & configuration of security tools (SIEM, EDR, DLP, etc.).
• Cloud: Practical experience securing Azure or AWS environments.
• Network: Design/implementation of firewalls, IDS/IPS, segmentation, etc.
• Automation: Scripting (PowerShell, Python, Bash) and IaC (Terraform/ARM/CloudFormation).
• Frameworks: Familiarity with NIST, CIS controls, and cloud‑specific security frameworks.
• Soft Skills: Strong problem‑solving, clear technical communication, self‑direction, and teamwork.

---

🌟 Preferred (“Nice‑to‑Have”) Credentials

• Deep expertise in the Microsoft security stack (Defender, Sentinel, Purview, Entra ID).
• Experience with Palo Alto, CrowdStrike, or similar enterprise tools.
• Container/Kubernetes security and DevSecOps practices.
• Pen‑testing/red‑team exposure.
• Consulting or professional‑services background.
• Certifications: CISSP, Azure Security Engineer, GIAC, OSCP, etc.

---

💰 Compensation (2024 ranges)

Region	Salary Range
Colorado	$95 k – $143.8 k
Washington, Illinois, New York, Southern CA	$100 k – $158.2 k
Northern California	$105 k – $165.3 k

Actual offer will reflect skill set, experience, and location.

---

🎁 Benefits & Perks

• Medical / Dental / Vision coverage
• Generous PTO + paid sick time & 11 paid holidays
• Flexible work arrangements (remote/hybrid)
• 401(k) with profit sharing
• Wellness program & generous parental leave
• Long‑term discretionary financial incentive plan (eligible levels)

---

📜 Legal & Diversity Statements (quick takeaways)

• EEO employer – no discrimination based on protected classes.
• Harassment‑free workplace policy.
• Fair Chance considerations for SF & LA applicants (criminal history not an automatic disqualifier).
• No unsolicited agency submissions – all candidate contact must go through Talent Acquisition.

---

📋 How to Use This Summary

1. Resume Tailoring – Mirror the exact terminology (e.g., “Azure Sentinel”, “Terraform”, “Zero‑Trust”) in your experience bullet points.
2. Cover Letter Hook – Highlight 2–3 of the core responsibilities that align with your strongest achievements (e.g., “Implemented automated remediation of Azure mis‑configurations using PowerShell and Azure Policy”).
3. Interview Prep – Be ready to discuss:
   • A specific cloud‑security control you designed and its impact.
   • How you’ve integrated a SIEM with ITSM for automated ticketing.
   • A time you collaborated with DevOps to embed security into CI/CD pipelines.
4. Compensation Discussion – Use the state‑specific range as a baseline; factor in certifications and years of experience when negotiating.

---

Good luck! If you’d like help drafting a targeted résumé, a cover‑letter template, or interview‑question practice specific to this role, just let me know. 🚀