NuHarbor Security

Role Description The Senior Security Engineer is the senior technical authority on the NuHarbor Security Engineering team and the owner of the engineering layer that NuHarbor's managed services depend on. This role operates with a high degree of autonomy and is anchored in Splunk. - Lives by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. - Owns the systems engineering that keeps NuHarbor's co-managed platforms running correctly; architecture, configuration, performance, and maintenance to NuHarbor and vendor best practice. - Ensures client data is properly onboarded, parsed, and normalized to the appropriate data model for each platform (e.g., Splunk CIM, Microsoft ASIM, Google UDM). - Diagnoses and resolves complex architectural problems across managed environments. - Self-assigns and drives the most complex and highest-impact work, operating independently. - Drives the engineering ticket queue with quality, efficiency, and completeness. - Designs, implements, and maintains engineering solutions for multi-tenant scalability, repeatability, and standardization. - Communicates with clients at an expert technical level, building trust and delivery excellence. - Performs the engineering and architecture work required to onboard new managed services clients. - Supports, deploys, and manages the components of NuHarbor's security automation and case management platform(s). - Builds and maintains automation workflows and integrations that connect the platform to client environments. - Regularly meets with clients to drive objectives forward and proactively addresses issues. - Develops engineering recommendations and enhancements that improve the security posture of each client's managed platforms. - Provides technical direction, leadership, and mentorship to the broader engineering team. - Provides architectural review and oversight for client operational projects. - Develops and improves onboarding and operational processes. - Helps design the engineering approach and operational processes for newly adopted technologies. - Maintains the industry and vendor certifications required to support the managed services catalog. - Participates in a 24x7 on-call rotation; other duties as assigned by Engineering Leadership. Qualifications - Bachelor’s Degree and five (5) or more years in the Information Technology field. - In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. - Five (5) or more years engineering security platforms in a managed services, enterprise, or comparable operational environment. - Three (3) or more years directly engineering and administering Splunk environments, including Splunk Enterprise Security. - Demonstrated experience onboarding and normalizing data sources to a common data model (e.g., Splunk CIM). - Strong Linux and Windows proficiency. - Strong understanding of security concepts and operations. - Strong understanding of networking concepts and architecture. - Proficiency with data visualization tools and strong analytical skills. - Proficiency scripting in at least one of PowerShell, Bash, or Python. - Must be a citizen of the United States. Requirements - Splunk Enterprise Certified Architect and/or Splunk Certified Consultant. - Microsoft AZ-500 and/or SC-100/SC-200. - Google Professional Security Operations Engineer (PSOE). - Hands-on engineering experience across one or more additional platforms in NuHarbor's catalog. - Experience engineering and supporting platforms in a multi-tenant MSSP environment. - Experience engineering platforms in support of a 24x7 SOC or MDR operation. - Experience with vulnerability management technologies. - Experience with infrastructure-as-code and automation tooling (e.g., Terraform, Ansible). - Experience supporting SLG or education clients. - Excellent written and verbal communication skills. - A track record of managing and prioritizing multiple projects simultaneously. - An understanding of how businesses operate and how technical decisions affect business results. - Passion for security and customer service. Benefits - Engagement and support of company leadership. - Recognition and rewards for employee commitment and contribution. - Growth in your career and capabilities. - A collaborative and driven working environment. - A fun and social working environment. - Competitive salary and benefits, including paid time to give back in your community and generous PTO.

• The Vulnerability Engineer will drive the organization’s vulnerability management efforts, to identify, prioritize, and mitigate vulnerabilities across client's digital assets. • Help customers reduce their organizational risk by discovering, validating, and prioritizing vulnerabilities and associated remediations. • Lead efforts to configure, manage, and optimize vulnerability management tools to identify, assess, and prioritize vulnerabilities across an organization’s assets. • Work closely with technology and security teams to ensure timely remediation of vulnerabilities in accordance with organizational risk thresholds and compliance requirements. • Conduct regular risk assessments using vulnerability management tools to provide a clear understanding of the security posture across networks, web applications, and cloud infrastructure. • Generate and present detailed reports, including executive-level summaries, that outline vulnerabilities, risk scores, and remediation progress. • Analyze threat trends and advise on proactive measures for mitigation based on emerging threats that may impact the organization. • Develop and implement automation for scanning, reporting, and remediation workflows to improve efficiency and reduce response times. • Continuously evaluate and refine processes to ensure efficient delivery of services to the organization. • Act as a key point of contact for stakeholders across the organization regarding platform capabilities, findings, and best practices. • Work closely with security, risk, and IT operations teams to align vulnerability management activities with broader security initiatives. • Mentor junior security team members on vulnerability management best practices, assisting in their professional development. • Ensure that vulnerability platform and related integrations are maintained, updated, and optimized for peak performance. • Troubleshoot issues within the platform and work with support if necessary to resolve complex problems. • Stay current with the latest trends in vulnerability management. • Participate in the evaluation of emerging tools and technologies that could enhance or complement capabilities within the organization. • Use your advanced understanding of, and ability to communicate, security technologies to mitigate cyber risks. • Develop recommendations and enhancements to mature a client’s cybersecurity program. • Required to participate in 24x7 rotation.

• Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. • Own investigations end-to-end from initial alert through root cause analysis and client-ready written narrative. • Correlate across SIEM, EDR, and identity telemetry to identify missed alerts. • Support the Security Analyst team with alert triage and escalation within SLA requirements. • Communicate proactively with the Security Operations Manager on active threats and escalations. • Produce ticket documentation without editorial cleanup. • Remain current on emerging threats, CVEs, and attacker techniques. • Train, mentor, and support junior analysts. • Review escalations prior to client delivery, ensuring documentation quality.

• Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. • Serve as the primary point of contact for clients throughout the lifecycle of Microsoft service projects, maintaining strong client relationships and delivering high-quality communication and support. • Plan and manage Microsoft solution onboarding, configuration, and operational implementation of service projects, including Microsoft Purview, Entra ID, and SharePoint. • Develop, maintain, and communicate detailed project plans, timelines, and documentation including contact lists, status updates, and post-project summaries. • Develop a comprehensive operational handoff plan for client’s post-implementation, including key ownership roles, workflows, and success metrics for long-term service maintenance. • Organize and lead internal and client-facing meetings, coordinate agendas, track action items, and manage follow-ups. • Prioritize and manage multiple projects and competing deadlines with strong attention to detail and organizational skills. • Proactively identify and address project risks or issues, propose mitigation plans, and escalate when necessary. • Use critical thinking and problem-solving skills to remove project blockers, resolve issues, and drive project success. • Maintain and support NuHarbor’s project management processes, tools, and reporting practices. • Deliver concise, professional, and client-facing presentations and status reports to a variety of stakeholders. • Work collaboratively across teams and departments, driving engagement and a customer-focused approach.

• Lives by the NuHarbor corporate values: Protect the House, Help Clients Win, Always Improve. • Performs engineering tasks required to sustain existing Managed Services clients. • Performs engineering tasks to support the onboarding of new Managed Services clients. • Performs and analyzes daily health checks on existing Managed Services clients. • Develops content in support of Manages Services clients. • Performs troubleshooting of client environments. • Document and create content to further build upon NuHarbor’s internal knowledgebase. • Regularly meet with clients to drive forward engineering objectives. • Maintains industry and vendor certifications required to support the Managed Services catalog. • Required to participate in 24x7 rotation. • Other duties and responsibilities as assigned by Engineering Leadership

• Responsible and accountable for analyzing security alerts, events, and trends to communicate the value of NuHarbor services. • Conduct investigations to provide actionable, context relevant, escalations to clients. • Provide analysis and interpretation of vulnerability scans and assessments. • Ensure client facing and internal escalations are serviced in a timely fashion. • Identify and communicate security gaps and potential mitigations. • Identify and scope opportunities for improvements in efficiency, quality, maturity, and capabilities. • Maintain current certifications and training relevant to their role as defined in the NuHarbor Career Course Toolkit. • Develop, implement, and improve documentation and operational processes. • Ensure reports are generated to standard and on-schedule. • Perform threat hunting in client environments. • Proactively identify and communicate internal and client risks. • Perform intelligence gathering and analysis to influence technical control development, client security program maturity, and client attack surface defense. • Continually research the cyber industry to stay up to date on current threats, threat actor’s tactics and techniques, and emerging vulnerabilities.