{"id":3165762,"url":"https://alion.io/job/election-systems-software-cyber-security-engineer","title":"Cyber Security Engineer","company":{"id":1791349,"name":"Election Systems & Software","domain":"essvote.com","url":"https://alion.io/company/essvote-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Omaha, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":138000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Windows","optional":false},{"name":"DNS","optional":true},{"name":"NIST CSF","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-21T15:05:31Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T11:52:36Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Description\nJoin the ES&S team as we craft the future of voting in the United States! On our team, you will push boundaries to provide solutions that meet the industry’s ever-evolving needs. Our people apply their innovative perspective to challenges big and small, and ES&S provides the resources to make our employees’ vision a reality.\nA Cyber Security Engineer at ES&S designs, implements, maintains, and improves enterprise cybersecurity technologies and controls that protect the organization’s systems, networks, applications, and data. This position serves as a technical security resource supporting security monitoring, threat detection, incident response, vulnerability management, security architecture, and the development and maintenance of cybersecurity policies and standards. Ideal candidates will have 3+ years of progressive cybersecurity experience in the following areas:\nAzure Security Services\nHands-on experience administering and configuring Microsoft Sentinel within Microsoft Azure.\nExperience creating and managing Data Collection Rules (DCRs), Log Analytics Workspaces, Azure Monitor Agent (AMA), and Logic Apps.\nExperience configuring Sentinel data connectors using built-in Content Hub solutions and custom data connectors.\nKnowledge of onboarding and managing Syslog, CEF, API, and custom log data sources.\nExperience creating DCR transformations and custom tables to filter, parse, transform, and route security telemetry.\nKnowledge of monitoring data ingestion and storage consumption, including managing data across Analytics and Data Lake tiers to optimize storage and cost.\nExperience creating Sentinel Workbooks to visualize security metrics, ingestion trends, data statistics, and operational performance.\nStrong working knowledge of Kusto Query Language (KQL) for data analysis, troubleshooting, reporting, and advanced threat hunting.\nMicrosoft Defender XDR\nHands-on experience supporting and administering Microsoft Defender XDR, including incident and alert management, investigation, and response.\nExperience using Advanced Hunting and KQL to investigate threats, analyze security telemetry, and identify potentially malicious activity across endpoints, identities, email, and cloud services.\nExperience with Exposure Management and Vulnerability Management, including identifying, tracking, and prioritizing vulnerabilities and CVEs for remediation.\nExperience onboarding Windows endpoints and servers into Microsoft Defender for Endpoint, validating sensor health, and troubleshooting onboarding and connectivity issues.\nWorking knowledge of Attack Surface Reduction (ASR) rules, including configuration, audit/enforcement modes, exclusions, testing, and troubleshooting.\nExperience configuring and managing alert suppression and tuning to reduce false positives and improve security operations efficiency.\nExperience investigating incidents and performing endpoint response and containment actions through Microsoft Defender XDR.\nPreferred experience using Microsoft Sentinel with Microsoft Defender XDR's unified security operations experience, including incidents, hunting, analytics, investigation, and response across both platforms.\nSplunk Enterprise Cloud\nHands-on experience with Splunk Enterprise Cloud and onboarding new security and operational data sources.\nExperience configuring and managing data inputs, including HTTP Event Collector (HEC).\nWorking knowledge of indexes, source types, data inputs, and data ingestion concepts.\nFundamental knowledge of Search Processing Language (SPL) for searching, filtering, analyzing, and reporting on data.\nExperience validating and troubleshooting data ingestion, parsing, indexing, and source-type assignments.\nExperience creating and scheduling Splunk searches and reports for security monitoring, operational reporting, and data analysis.\nCisco XDR Security Technologies\nPreferred hands-on experience with Cisco XDR, including integrating Cisco and third-party security products to ingest and correlate security telemetry.\nExperience performing security investigations in Cisco XDR, including reviewing detections, investigating affected assets, and using available response actions to support threat containment and remediation.\nWorking knowledge of Cisco Umbrella SIG and Cisco Secure Access, including troubleshooting security policies, web access, DNS, proxy, and connectivity issues.\nUnderstanding of SSL/TLS inspection, including certificate-based decryption, policy exclusions, certificate trust issues, and troubleshooting encrypted traffic inspection.\nUnderstanding of Remote Browser Isolation (RBI) and how browser isolation can be used to reduce risk from potentially malicious or untrusted web content.\nExperience troubleshooting security integrations and validating that telemetry from Cisco and third-party security platforms is successfully flowing into the appropriate monitoring and investigation platforms.\nGovernance, Risk, and Compliance (GRC)\nWorking knowledge of information security principles, including the Confidentiality, Integrity, and Availability (CIA) triad, and the ability to apply these principles when performing security and risk assessments.\nExperience performing information security assessments, identifying security gaps, documenting risks, and recommending appropriate controls and remediation activities.\nWorking knowledge of the NIST Cybersecurity Framework (CSF) and the ability to use NIST guidance as a reference when developing, reviewing, and maintaining information security policies and standards.\nUnderstanding of risk management principles, including risk identification, assessment, prioritization, treatment, acceptance, and ongoing monitoring.\nKnowledge of security lifecycle management, including identifying and managing risks associated with aging technologies, end-of-life systems, unsupported software, and compensating controls.\nFamiliarity with commonly used security frameworks and standards, including NIST CSF, NIST SP 800-series guidance, CIS Controls, and ISO/IEC 27001.\nAbility to translate technical security findings into business risk, including documenting impact, likelihood, remediation recommendations, compensating controls, and residual risk.\nExperience supporting risk registers, security exceptions, risk acceptance, remediation tracking, and security control assessments.\nTravel: Up to 10% travel is anticipated.\nEEO Statement: To provide equal employment and advancement opportunities to all individuals, employment decisions at ES&S will be based on merit, qualifications, and abilities. ES&S does not discriminate in employment opportunities or practices based on race, creed, color, religion, sex, sexual orientation, national origin, citizenship status, marital status, age, disability, genetic information, or because of past, current, or future military obligations or any other characteristics protected by law.\nThis policy governs all aspects of employment, including selection, job assignment, compensation, discipline, termination, and access to benefits and training.","description_format":"text","description_chars":7063,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Digital Government","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-23T17:20:46Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":29,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/election-systems-software-cyber-security-engineer","json_url":"https://alion.io/job/election-systems-software-cyber-security-engineer.json","meta":{"generated_at":"2026-10-25T12:57:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18297,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1791349},"rest":"https://alion.io/mcp/rest/get_company?id=1791349"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felection-systems-software-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felection-systems-software-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felection-systems-software-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/election-systems-software-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felection-systems-software-cyber-security-engineer"}]}