{"id":3474824,"url":"https://alion.io/job/kimley-horn-cybersecurity-engineer-5","title":"Cybersecurity Engineer","company":{"id":1885935,"name":"Kimley-Horn","domain":"kimley-horn.com","url":"https://alion.io/company/kimley-horn","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":15,"ghost_share":0,"stale_share":0,"repost_share":0.067,"time_to_fill_p50_days":17,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Raleigh, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":119000,"max_usd":227000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-10-29T18:28:32Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-09T03:58:39Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Overview\nKimley-Horn, one of Fortune Magazine’s “100 Best Companies to Work For,” is seeking an experienced Cybersecurity Engineer to take technical ownership of key Security Operations capabilities. This hands on role will strengthen our threat detection, incident response, monitoring, and security automation capabilities. This position will serve as a senior technical escalation resource, improve operational processes and tooling, and help advance Kimley-Horn toward a more automated and autonomous SOC.\nThis is and in-office position.\nResponsibilities\nLead incident response operations as the primary escalation point, providing technical guidance and mentorship to team members while managing the incident response on-call schedule and coverage\nDevelop, maintain, and continuously improve incident response processes, procedures, playbooks, and escalation paths\nServe as a senior technical escalation resource for security incidents, leading investigations, containment, remediation, recovery, and lessons-learned activities\nHelp advance the Security Operations program toward a more automated and autonomous SOC through orchestration, analytics, AI-assisted workflows, and continuous process improvement\nAdminister, optimize, and advance endpoint detection and response (EDR/XDR) technologies, including policy management, detection tuning, integrations, and operational health\nImprove security event collection and monitoring within the SIEM by onboarding data sources, validating telemetry, developing correlation and detection logic.\nDesign and implement automation for alert enrichment, triage, investigation, containment, response, and reporting to increase consistency and reduce manual effort or alert fatigue\nEstablish and conduct proactive threat hunting using endpoint, identity, email, network, cloud, and other security telemetry to identify suspicious activity \nPartner with internal teams and external providers to improve detection coverage, coordinate incident response, and translate operational findings into actionable security improvements\nParticipate in tabletop exercises and simulations to validate and improve incident response readiness\nPrepare clear incident documentation, metrics, and reports that communicate findings, actions taken, risk, and lessons learned to technical and non-technical stakeholders\nQualifications\nBachelor’s degree in information security, cybersecurity, computer science, or a related field, or equivalent practical experience\nProfessional certifications such as GCIH, GCFA, OSIR, CISSP, or another relevant security certification\n5+ years of hands-on experience in security operations, incident response, security engineering, threat detection, or a similar role within an enterprise environment\nDemonstrated experience investigating and responding to security incidents across endpoint, identity, email, network, or cloud environments\nStrong experience administering and optimizing enterprise EDR or XDR technologies, including detection tuning, policy management, and response actions\nExperience with SIEM architecture and operations, including log source onboarding, event collection, data validation, query development, correlation, and detection engineering\nExperience developing and maintaining incident response playbooks, procedures, and escalation workflows\nExperience with security orchestration, automation, and response (SOAR), scripting, APIs, or workflow automation\nExperience performing threat hunting and translating findings into improved detections, controls, or response processes\nExcellent analytical and problem-solving skills, with the ability to make sound decisions during high-pressure incidents\nStrong written and verbal communication skills, with the ability to convey technical findings, risk, and recommended actions to technical and non-technical stakeholders\nDesired Skills:\nAdvanced knowledge of incident response methodologies, digital investigation techniques, and frameworks such as NIST and MITRE ATT&CK\nExperience with Microsoft security technologies and enterprise EDR/XDR, SIEM, SOAR, and email security platforms\nProficiency with a scripting or automation language and experience integrating security tools through APIs\nFamiliarity with AI-assisted security operations, autonomous SOC concepts, or automated investigation and response\nExperience creating operational metrics, dashboards, and reporting that demonstrate detection and response effectiveness\nWhy Kimley-Horn?\nAt Kimley-Horn, we do things differently. People, clients, and employees are at the forefront of who we are. Clients know we prioritize achieving their goals and growing their success. Employees know our culture and approach to business are built on a desire to provide an environment for everyone to flourish. Our commitment to quality is only as good as the people behind it- that’s why we welcome and develop passionate, hardworking, and proactive employees. We take pride in how our employee retention, robust benefits package, and company values have led to Kimley-Horn’s placement on the Fortune “100 Best Companies to Work” list for 19 years!\nKey Benefits at Kimley-Horn\nExceptional Retirement Plan: 2-to1- company match on up to 4% of eligible compensation (salary + bonus) and additional profit-sharing contribution.\nComprehensive Health Coverage: Low-cost medical, dental, and vision insurance options.\nTime Off: Personal leave, flexible scheduling, floating holidays, and half-day Fridays.\nFinancial Wellness: Student loan matching in our 401(k), and performance-based bonuses.\nProfessional Development: Tuition reimbursement and extensive internal training programs.\nFamily-Friendly Benefits: New Parent Leave, family building benefits, and childcare resources.","description_format":"text","description_chars":5748,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development","Retirement plans","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Civil & Structural Engineering","Urban Planning"],"lifecycle":[{"event":"open","at":"2026-10-29T18:28:32Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 17 · green card filings: 3","filings_12m":17,"filings_prev_12m":16,"green_card_filings_12m":3,"median_offered_wage_usd":109500,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.885,"p_room":0.9,"age_days":10,"expected_fill_days":17,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/kimley-horn-cybersecurity-engineer-5","json_url":"https://alion.io/job/kimley-horn-cybersecurity-engineer-5.json","meta":{"generated_at":"2026-11-09T06:50:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3471,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1885935},"rest":"https://alion.io/mcp/rest/get_company?id=1885935"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkimley-horn-cybersecurity-engineer-5"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkimley-horn-cybersecurity-engineer-5"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkimley-horn-cybersecurity-engineer-5"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kimley-horn-cybersecurity-engineer-5\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkimley-horn-cybersecurity-engineer-5"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3474824}},{"tool":"search_jobs","arguments":{"company":"kimley-horn.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3474824},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}