Security Engineer IV

Kforce has a client that is seeking a Security Engineer IV in Charlotte, NC. Key Responsibilities: DRR Security Engineering & Controls: Design, implement, and enforce security controls across the DRR environment, including: * Network isolation

* IAM/RBAC

• Privileged Access Management (PAM)
• Encryption and system hardening
• Ensure secure configuration and ongoing posture of DRR systems and protected backups

Privileged Access Management (PAM):

• Implement and support PAM solutions (CyberArk preferred) for DRR and integrated platforms
• Manage privileged access policies, including least privilege and time-bound access controls
• Support onboarding of systems and users into PAM solutions

Vulnerability Management & Patching:

• Own patching and vulnerability remediation for DRR-related systems
• Partner with infrastructure teams to ensure timely remediation and compliance
• Continuously assess and improve system hardening and security posture

Monitoring, Detection & Response:

• Monitor DRR environment activity using SIEM/SOAR tools (e.g., Splunk)
• Tune alerts, detection rules, and automated response workflows
• Support threat analysis, incident response, and forensic investigations

Incident Response & Recovery Support

• Serve as a security SME during cyber incidents and recovery exercises
• Guide secure usage of DRR platforms and protected backups during recovery events
• Collaborate with cross-functional teams to ensure secure restoration processes

Security Technology Implementation & Support: Support and implement security technologies such as:

• PAM (CyberArk)
• Endpoint/patching tools (Tanium - experience preferred, training provided)
• Assist with configuration, integration, and ongoing optimization of security tools

Infrastructure & Access Governance:

• Support underlying infrastructure (Windows/Linux) within DRR environments
• 5+ years of experience in cybersecurity engineering, security operations, or infrastructure security
• Hands-on experience with Privileged Access Management (PAM) (CyberArk strongly preferred)
• Experience supporting Windows and Linux environments

Strong understanding of:

• RBAC/IAM concepts
• Security hardening and system configuration
• Vulnerability management and patching processes
• Experience working with SIEM tools (e.g., Splunk) at a functional level (alerting, monitoring, use cases)
• Experience with incident response and threat analysis
• Ability to operate in a hands-on engineering + operational support role

Preferred Qualifications:

• Security certifications (e.g., CISSP or similar)
• Experience with tools such as Tanium, Cyberark, Splunk, Centrify, BeyondTrust, or similar PAM/security platforms
• Exposure to SOAR tools and automated response workflows
• Experience supporting disaster recovery, backup, or resiliency environments