Note: The job is a remote job and is open to candidates in USA. Accord Technologies Inc is seeking an experienced Security Architect / Security Engineer Consultant to support enterprise cybersecurity engineering and operations. The role focuses on developing Python-based security automations and tools, integrating enterprise security platforms, administering Linux systems, supporting IAM, and participating in SOC operations and on-call support.
Responsibilities
- Plan, design, develop, deploy, administer, and provide operational support for enterprise security automations and custom security tools
- Develop and maintain Python-based automations, internal web applications, APIs, SDK integrations, scripts, dashboards, command-line utilities, and system integrations
- Develop automated workflows for: + Alert enrichment + Alert triage + Incident response + Case management + Notifications + Containment + Escalation + Reporting
- Develop custom tools supporting CVE vetting, vulnerability enrichment, prioritization, tracking, and security decision support
- Test, deploy, troubleshoot, and continuously improve security applications and automated workflows
- Support the planning, design, deployment, and operation of enterprise security platforms and technologies
- Support security capabilities including: + Identity and Access Management (IAM) + Data Security Posture Management (DSPM) + Attack Surface Management (ASM) + Vulnerability Management + Email Security + Endpoint Security + SIEM + XDR + SOAR + Logging and Monitoring + Network Security + Cloud Security + Threat Intelligence
- Integrate security platforms with ticketing, case management, notification, identity, data sources, APIs, SDKs, and other enterprise systems
- Support IAM functions including user provisioning and deprovisioning, access reviews, role-based access control, service accounts, API credentials, authentication, authorization, and identity integrations
- Deploy, configure, patch, monitor, optimize, and troubleshoot Linux systems supporting security sensors, collectors, connectors, applications, containers, and data-processing services
- Support Docker-based environments and related security infrastructure
- Support security architects, engineers, SOC analysts, incident responders, and business stakeholders through technical troubleshooting, automation development, system integration, escalation support, knowledge transfer, and operational handoffs
- Monitor automation health, application availability, system performance, sensor status, integration failures, API errors, vulnerability status, and other security engineering metrics
- Support a 24x7 SOC through a monthly on-call rotation
- Provide after-hours maintenance, incident escalation support, and operational handoffs as required
- Ensure high availability, resilience, backup, recovery, patching, lifecycle management, secure configuration, and controlled change processes for security tools and supporting systems
Skills
- • Broad hands-on Security Engineering experience across multiple cybersecurity technologies, systems, integrations, and operational functions
- • Strong experience developing security automations, scripts, integrations, utilities, and custom security tools using Python
- • Advanced Python development experience
- • Strong troubleshooting skills across: + Security applications and platforms + Operating systems + Networks + Identity services + System integrations
- • Hands-on Linux system deployment, configuration, patching, scripting, service management, monitoring, troubleshooting, and lifecycle management
- • Experience developing automation and response workflows using: + Python + PowerShell + Bash + REST APIs + JSON + YAML + Vendor SDKs
- • Experience integrating enterprise technologies through APIs, SDKs, web services, structured data formats, authentication methods, and vendor-supported interfaces
- • 8 years of relevant professional experience may be substituted in lieu of education
- • At least 5 years of experience supporting large IT environments, security systems, software development, and/or system deployments
- • Annual CJIS certification is required
- • Must be able to participate in a monthly on-call rotation supporting a 24x7 SOC
- • Must be available for after-hours maintenance and incident escalation support as needed
- • Work must be performed within the contiguous United States
- • Experience serving as a Security Engineering Generalist in a large, multi-tenant, shared-services, or managed-services environment
- • Hands-on experience with: + Linux + Docker + Security sensors + Monitoring + Scripting + Security platform administration
- • Experience supporting SOC analysts, security engineers, incident responders, and enterprise customers in rapidly changing operational environments
- • Experience developing playbooks, runbooks, procedures, and technical documentation
- • Familiarity with enterprise security technologies such as: + Palo Alto Networks + Proofpoint + Tenable + Cribl + WhatsUp Gold
- • Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and related enterprise security technologies
- • Strong understanding of: + Enterprise security architecture + Incident response + Networking + Access control + Secure software development + Systems administration + Industry-standard cybersecurity frameworks
- • Experience developing or supporting internal web applications, APIs, dashboards, databases, command-line tools, and related software components
- • Familiarity with source control, testing, software deployment, and full-stack development practices
- • Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field preferred
- • CISSP
- • Security+
- • GIAC
- • Other relevant cybersecurity certifications
- • Linux certifications
- • Python certifications
- • Cloud certifications
- • IAM certifications
- • Other relevant security engineering or platform certifications
- • Candidates based in South Carolina are preferred when they can provide in-state field support for equipment or hardware when required
Benefits
- 100% Remote
- VPN access and required organizational equipment will be provided
Company Overview