Security Engineer

## About American Cyber American Cyber partners with organizations to strengthen their security posture through modern cybersecurity solutions and services. We help our clients reduce risk, improve operational resilience, and enable secure, scalable growth. Our mission is to build resilient and compliant cybersecurity programs for our customers. ## Role Summary American Cyber is seeking a Security Engineer / Cybersecurity Engineer (Independent Contractor – 1099) to support the design, implementation, and optimization of security solutions across enterprise IT, cloud, and operational environments. In this contract role, you will deploy and manage modern security controls, improve detection and response capabilities, and support compliance and risk management initiatives in collaboration with IT, DevOps, and Security Operations stakeholders. ## Location * Remote (U.S.-based preferred) * United States ## What You’ll Do * Design, implement, and maintain enterprise security solutions, including firewalls, IDS/IPS, endpoint protection, and data loss prevention (DLP) controls * Partner with IT and DevOps teams to secure network infrastructure, cloud environments, and applications through practical, scalable security engineering * Conduct vulnerability assessments and penetration testing activities; prioritize findings and support remediation planning and validation * Configure, manage, and optimize SIEM, EDR, and SOAR platforms to improve visibility, alert fidelity, and response workflows * Support identity and access management (IAM) initiatives, including SSO, MFA, and privileged access management (PAM) * Monitor security logs, alerts, and dashboards to proactively identify, triage, and mitigate threats * Develop and maintain security architecture documentation, including diagrams, technical standards, and implementation runbooks * Support compliance alignment with frameworks such as NIST, ISO 27001, CIS, PCI DSS, HIPAA, and other applicable requirements * Participate in incident response activities by providing technical expertise for investigation, containment, eradication, and recovery * Evaluate emerging security technologies and recommend improvements that measurably strengthen security posture * Contribute to security policies, standards, and technical guidelines that enable consistent implementation across environments ## Required Qualifications * Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience) * 3–5 years of experience in cybersecurity engineering, systems administration, or network engineering with a security focus * Strong understanding of networking concepts and protocols, operating systems (Windows, Linux, macOS), and core security principles * Hands-on experience with security tooling such as: * Firewalls (e.g., Palo Alto, Fortinet) * SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel) * EDR solutions (e.g., CrowdStrike, Carbon Black) * Vulnerability management tools (e.g., Nessus, Qualys) * Experience with scripting or automation (Python, Bash, and/or PowerShell) to improve operational efficiency * Familiarity with cloud platforms (AWS, Azure, and/or Google Cloud) and common cloud security controls * Strong analytical, troubleshooting, and problem-solving skills * Excellent written and verbal communication skills and the ability to collaborate effectively in a distributed environment ## Preferred Qualifications * Industry certifications such as CISSP, GSEC, CEH, CCSP, GCIA, OSCP, or CompTIA Security+ * Experience with container security and orchestration environments (Docker, Kubernetes) and DevSecOps practices * Knowledge of Zero Trust architecture concepts, including segmentation and micro-segmentation strategies * Familiarity with governance, risk, and compliance (GRC) tooling such as Archer or ServiceNow * Experience supporting security programs in regulated industries (e.g., finance, healthcare, government) ## Engagement Terms (1099 Contractor) * This role is structured as an independent contractor (1099) engagement and does not constitute an employment relationship * You retain discretion over the manner and means of performing services, consistent with agreed objectives, deliverables, and timelines * Compensation structure (hourly and/or project-based) will be defined in a separate agreement * Contractor is responsible for applicable taxes, insurance, and business expenses unless otherwise specified ## Performance Expectations * Effective implementation and reliable operation of security controls across enterprise IT and cloud environments * Timely identification, analysis, prioritization, and remediation support for vulnerabilities and security threats * Measurable improvements to detection and response capabilities through SIEM/EDR/SOAR tuning and operationalization * Clear documentation of security architecture, configurations, and standards to support maintainability and audit readiness * Strong collaboration with IT, DevOps, and Security teams to drive continuous improvement in security posture and compliance readiness