Infrastructure Engineer, Senior

About the Role

Security Operations is a key part of Southland’s cybersecurity program, supporting the monitoring, response, tooling, workflows, and coordination that help protect the company from cyber threats. This role helps improve how Southland detects issues, responds to incidents, manages operational risk, and keeps security work moving across users, endpoints, servers, cloud services, and business systems.

As an Infrastructure Engineer, Senior, you will work with cybersecurity, IT, infrastructure, support, vendors, and business teams to investigate alerts, respond to incidents, follow up on vulnerabilities, and improve operational workflows. This role is hands-on and helps turn security events into clear action, documentation, and remediation.

Responsibilities

• Relationship Building/Management
  • Build strong working relationships with cybersecurity, IT operations, infrastructure, support, vendors, and business teams.
  • Serve as a hands-on resource for operations questions, escalations, incidents, and follow-up work.
  • Work with technical owners so investigation steps, impact, and next actions are clear.
  • Build trust by communicating clearly, following through, and staying close to the work.
• Monitoring and Triage
  • Investigate alerts from EDR, SIEM, email, identity, vulnerability, cloud, and endpoint tools.
  • Review alert details, logs, user activity, endpoint data, and related context to determine risk.
  • Escalate issues clearly when an incident, containment action, or business decision is needed.
  • Document findings, decisions, and next steps so work can be tracked and reviewed.
• Incident and Vulnerability Response
  • Support incident response activities, including scoping, containment, remediation, and recovery follow-up.
  • Coordinate with IT, support, infrastructure, and business owners during response and remediation work.
  • Follow up on vulnerabilities, misconfigurations, exposure, and operational findings through closure.
  • Help reduce disruption by keeping response work organized, practical, and timely.
• Technology and Tool Support
  • Use security operations tools such as EDR, SIEM, email security, identity security, vulnerability management, and ITSM platforms.
  • Support tuning, automation, dashboards, playbooks, and data quality improvements.
  • Help connect alerts, tickets, evidence, ownership, and remediation status across tools.
  • Improve visibility, alert quality, response speed, and reduction of manual work.
• Change Management
  • Support rollout of new security tools, monitoring practices, response processes, and operational standards.
  • Help analysts, engineers, support teams, and stakeholders understand what is changing.
  • Listen to feedback, identify issues early, and recommend practical adjustments.
  • Support testing, training, and readiness before new tools or processes go live.
• Support and Documentation
  • Document investigations, incident notes, playbooks, runbooks, escalation paths, and decision points.
  • Maintain accurate operational data in dashboards, tickets, alerts, and response records.
  • Provide day-to-day guidance on triage, response, vulnerabilities, and operations questions.
  • Share knowledge with peers and help keep procedures and handoffs consistent.
• Continuous Improvement
  • Identify patterns in alerts, vulnerabilities, incidents, and repeated operational issues.
  • Recommend practical improvements to detections, playbooks, dashboards, automation, and workflows.
  • Support planning for operations maturity, MSSP/vendor coordination, tooling, and automation.
  • Keep up with relevant threat, detection, response, and vulnerability management practices.

Requirements

• Strong hands-on security operations, incident response, threat detection, or vulnerability experience.
• Experience with EDR, SIEM, email security, identity security, vulnerability management, ITSM, or similar tools.
• Solid understanding of alert triage, endpoint security, identity risk, cloud security, and response workflows.
• Experience supporting investigations, incidents, vulnerabilities, tool tuning, or process improvement.
• Ability to work well with both business stakeholders and technical teams.
• Strong communication skills and a practical, straightforward approach.
• Ability to sort through technical issues, make sound recommendations, and keep work moving.
• Experience with MSSP coordination, incident playbooks, SIEM tuning, or automation is preferred.
• Interest in tools that improve visibility, automation, reporting, and day-to-day execution.
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field is preferred.
• Minimum 4 – 6 years of experience in cybersecurity, security operations, incident response, IT operations, networking, or related role.

Benefits

• 401(k) plan with 50% company match (no cap) and immediate 100% vesting
• Medical, dental, and vision insurance (100% paid for employee)
• Annual bonus program based upon performance, achievement, and company profitability
• Term life, AD&D insurance, and voluntary life insurance
• Disability income protection insurance
• Pre-tax flexible spending plans (health and dependent care)
• Paid parental leave
• Paid holidays, vacation, and personal time
• Training/professional development opportunities and company-paid memberships for professional associations and licenses
• Wellness benefits

Pay

Final pay is determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data. For (Colorado/New York City/California/Washington/Maryland/Virginia/DC) this ranges from $91,300.00 - $156,121.00 plus annual incentive, benefits, and retirement program as outlined above.

About Southland Industries

As one of the nation’s largest MEP companies, Southland Industries is built on the foundation of great people. Since 1949, we have put our people first, enabling growth, professional achievement, and innovation. If you want to join a fast-paced environment where you’re engaged, challenged, and valued, apply now to join our dynamic team.