Security Engineer

• Define and maintain enterprise cloud security architecture for GCP and GRC.
• Provide architectural guidance across identity, network, workload, data, and platform security.
• Review cloud solution designs to ensure alignment with security and compliance requirements.
• Establish security guardrails and governance for cloud implementations.
• Drive adoption of secure-by-design principles and security automation.
• Assess security risks and recommend appropriate architectural controls.
• Evaluate emerging cloud technologies and recommend secure adoption strategies.
• Mentor engineering teams on cloud security best practices.

Senior Cloud Security Architect

• Administer, install, configure, and maintain Splunk cloud, on-premises, and other SIEM/log management tools
• Develop, audit, and optimize correlation rules and collaborate with ESOC to create detections
• Build and maintain dashboards, reports, alerts, and visualizations
• Create and optimize SPL queries and manage knowledge objects
• Onboard and manage data sources including syslog, HEC, forwarders, and APIs
• Manage deployment servers and forwarders
• Maintain inputs, reporting, and alerting across Azure and AWS environments
• Improve system performance and propose platform enhancements
• Develop scripts and integrations using Python, Bash, and PowerShell
• Use workflow automation tools with ServiceNow and other security/infrastructure platforms
• Use regex for parsing, extraction, and automation
• Document data-ingestion procedures and maintain access controls for compliance
• Create configuration standards, policies, and procedures
• Develop program metrics to measure monitoring effectiveness
• Resolve incidents and issues and integrate changes through change-management processes
• Train and mentor ESOC members on SIEM capabilities and best practices
• Interface with analysts and business stakeholders to ensure tools, dashboards, and applications meet requirements
• Communicate with teams and clients
• Work across Linux and Windows platforms
• Apply networking, workflow, and IT-reporting knowledge

Cybersecurity Specialist, Splunk Engineer

• Serve as a trusted security advisor for assigned accounts
• Align information security practices with client objectives, regulatory requirements, and operational standards
• Lead security governance activities and support delivery excellence across assigned accounts and products
• Maintain account system security plans
• Coordinate security metrics, reporting, audit preparation, and remediation efforts
• Manage and report security incidents, risks, exceptions, threats, and vulnerabilities in alignment with service level agreements
• Partner with Gainwell teams, suppliers, and client stakeholders to promote consistent security standards
• Resolve compliance concerns
• Support multiple accounts, products, or suppliers while balancing operational delivery and compliance expectations
• Collaborate with client and internal leadership, information governance, and IT security stakeholders

Information Security Officer

• Monitor and analyze security events for the real-time 24/7/365 Enterprise Security Operations Center Detection & Response team
• Operate SIEM and monitor firewall logs, system logs, intrusion detection systems, applications, databases, cloud infrastructure and other security information sources
• Respond to and escalate events and potential intrusion or security breach alerts
• Collect historical incident data for trend analysis and security-measure improvement
• Assist with incident containment to prevent unauthorized access or data loss
• Investigate and approve or deny IP/URL block requests
• Develop signature patterns and provide signature-tuning feedback to improve anomaly detection
• Create and maintain incident tickets
• Perform PCAP analysis and event correlation
• Determine incident urgency and potential impact
• Analyze malicious-actor activity, infection vectors, timelines and associated data loss
• Develop and maintain SOPs, incident reports, policies and other security documentation
• Communicate and escalate issues and alerts according to process or management direction
• Support additional Enterprise Security Operations Center activities

Cybersecurity Ops Associate – 2nd Shift

• Monitor and analyze security events for the real-time 24/7/365 Enterprise Security Operations Center Detection & Response team
• Operate SIEM and monitor firewall logs, system logs, intrusion detection systems, applications, databases, cloud infrastructure and other security information sources
• Respond to and escalate security events and potential intrusion or security breach alerts
• Collect historical incident data for trend analysis and security-measure improvement
• Assist with incident containment to prevent unauthorized access or data loss
• Investigate and approve or deny IP/URL block requests
• Develop signature patterns and provide feedback on signature tuning
• Create and maintain incident tickets
• Perform PCAP analysis and event correlation
• Determine urgency and potential impact of incidents
• Analyze malicious-actor activity, infection vectors, timelines and data loss
• Develop and maintain SOPs, incident reports, policies and other security documentation
• Communicate and escalate issues and alerts as required

Security Engineer jobs in Tennessee

Senior Cloud Security Architect

Cybersecurity Specialist, Splunk Engineer

Information Security Officer

Cybersecurity Ops Associate – 2nd Shift

Cybersecurity Ops Associate, 3rd Shift