Lives by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House.
Owns the systems engineering that keeps NuHarbor's co-managed platforms running correctly; architecture, configuration, performance, and maintenance to NuHarbor and vendor best practice, so that Detection Engineering and SOC Operations can function reliably on top of them.
Ensures client data is properly onboarded, parsed, and normalized to the appropriate data model for each platform (e.g., Splunk CIM, Microsoft ASIM, Google UDM).
Diagnoses and resolves complex architectural problems across managed environments, including those that block or degrade downstream detection and analysis.
Self-assigns and drives the most complex and highest-impact work, operating independently without requiring direction.
Drives the engineering ticket queue with quality, efficiency, and completeness, resolving issues fully rather than partially.
Designs, implements, and maintains engineering solutions for multi-tenant scalability, repeatability, and standardization across NuHarbor's client base, solving problems in a way that is durable and portable rather than one environment at a time.
Communicates with clients at an expert technical level, building the trust and delivery excellence that turns clients into raving fans.
Performs the engineering and architecture work required to onboard new managed services clients and to sustain and mature existing ones.
Supports, deploys, and manages the components of NuHarbor's security automation and case management platform(s), including integrations across the managed stack (SIEM, EDR, identity, ticketing), configuration to best practice, and multi-tenancy.
Builds and maintains automation workflows and integrations that connect the platform to client environments, partnering with SOC and Detection Engineering on the response logic those workflows execute.
Regularly meets with clients to drive objectives forward and proactively addresses issues before they escalated.
Develops engineering recommendations and enhancements that improve the security posture and effectiveness of each client's managed platforms, and communicates them to client stakeholders.
Provides technical direction, leadership, and mentorship that measurably raises the capability of the broader engineering team.
Provides architectural review and oversight for client operational projects.
Develops and improves onboarding and operational processes, and builds processes to support new technologies at the direction of Engineering Leadership.
Helps design the engineering approach and operational processes for newly adopted technologies, in support of new and evolving service offerings.
Maintains the industry and vendor certifications required to support the managed services catalog, and ensures managed platforms are patched and hardened in response to relevant vulnerabilities.
Participates in a 24x7 on-call rotation; other duties as assigned by Engineering Leadership.
Requirements
Bachelor’s Degree and five (5) or more years in the Information Technology field.
In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
Five (5) or more years engineering security platforms in a managed services, enterprise, or comparable operational environment.
Three (3) or more years directly engineering and administering Splunk environments, including Splunk Enterprise Security.
Demonstrated experience onboarding and normalizing data sources to a common data model (e.g., Splunk CIM).
Strong Linux and Windows proficiency.
Strong understanding of security concepts and operations.
Strong understanding of networking concepts and architecture.
Proficiency with data visualization tools and strong analytical skills.
Proficiency scripting in at least one of PowerShell, Bash, or Python, with working familiarity across the others.