Cybersecurity Engineer

Tillster

. Monitor security alerts from SIEM, EDR, IDS/IPS, and other security tools .

Posted 10/5/2026full-timeSan Diego • California • United StatesMid-LevelSenior💰 $65,000 - $85,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in monitoring, detecting, analyzing, and responding to security threats using SIEM, EDR, IDS/IPS, and other security tools. Proficient in developing and delivering security awareness training, conducting phishing simulations, and supporting compliance efforts such as SOC 2, ISO 27001, and PCI.

Highest-signal resume keywords

SIEM MonitoringIncident ResponsePhishing Simulation CampaignsSecurity Awareness TrainingVulnerability Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Incident InvestigationThreat DetectionAnomaly IdentificationEvidence CollectionRemediation TrackingTactics, Techniques, and Procedures (TTPs)Alert TriageIncident DocumentationMetrics ReportingRunbook Maintenance

Soft Skills

Analytical ThinkingAttention to DetailCommunication SkillsTeam CollaborationProblem-Solving

Tools & Technologies

EDRIDS/IPSSIEMSecurity ToolsPhishing Simulation Tools

Industry Keywords

SOC 2ISO 27001PCIComplianceEmerging Threats

About the role

Key responsibilities & impact

Monitor security alerts from SIEM, EDR, IDS/IPS, and other security tools
Identify suspicious activity, anomalies, and potential security incidents
Triage alerts and determine severity, scope, and impact
Escalate incidents according to defined procedures
Investigate security events and confirm true positives
Assist with containment, eradication, and recovery efforts
Collect and preserve evidence for incident analysis
Participate in post-incident reviews and lessons learned
Analyze attacker techniques, tactics, and procedures
Stay current on emerging threats and vulnerabilities
Contribute to threat intelligence and detection improvements
Recommend enhancements to alerting and response processes
Review vulnerability scan results and assist with validation
Track remediation efforts and verify fixes
Develop, deliver, and maintain security awareness training for employees
Plan, configure, and execute phishing simulation campaigns
Monitor and triage user-reported suspicious emails
Analyze phishing simulation and training results to identify high-risk users, departments, and trends
Coordinate targeted follow-up training for users who repeatedly fail phishing simulations
Track training completion and report security awareness program metrics to leadership
Document incidents, investigations, and response actions
Maintain runbooks, playbooks, and procedures
Prepare reports and metrics for leadership and compliance needs
Work closely with Security Engineers, IT, and DevOps teams
Provide guidance during active security incidents
Support audits and compliance efforts, including SOC 2, ISO 27001, and PCI

Requirements

What you’ll need

Must be based in San Diego, California
Local candidates only
No visa sponsorship
Must be authorized to work in the country without requiring visa sponsorship
Ability to monitor, detect, analyze, and respond to security threats
Knowledge of SIEM, EDR, IDS/IPS, and other security tools
Ability to identify suspicious activity, anomalies, and potential security incidents
Ability to triage alerts and determine severity, scope, and impact
Ability to investigate security events and confirm true positives
Ability to assist with containment, eradication, and recovery efforts
Ability to collect and preserve evidence for incident analysis
Knowledge of attacker tactics, techniques, and procedures (TTPs)
Awareness of emerging threats and vulnerabilities
Ability to review vulnerability scan results and assist with validation
Ability to track remediation efforts and verify fixes
Ability to develop, deliver, and maintain security awareness training
Ability to plan, configure, and execute phishing simulation campaigns
Ability to monitor and triage user-reported suspicious emails
Ability to analyze phishing simulation and training results
Ability to track training completion and report program metrics
Ability to document incidents, investigations, and response actions
Ability to maintain runbooks, playbooks, and procedures
Ability to prepare reports and metrics for leadership and compliance needs
Ability to support SOC 2, ISO 27001, and PCI/PCI DSS audits and compliance efforts

Benefits

Comp & perks

Medical, dental, vision and FSA benefits for full-time regular employees and dependents
Healthcare and Dependent Care reimbursement programs
Employee Assistance Program (EAP)
Optum Care 24-hour confidential medical counseling services
Ten paid holidays per calendar year
15 days of PTO during the first 12 months of continuous service
22 days of PTO in subsequent years
Pro-rated PTO for eligible part-time employees
Eligibility to participate in the 401(k) Plan from employment start date
College tuition and education assistance programs
Udemy Learning courses
Ongoing learning and development opportunities