NuHarbor Security

Security Engineer

• Lives by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House.
• Owns the systems engineering that keeps NuHarbor's co-managed platforms running correctly; architecture, configuration, performance, and maintenance to NuHarbor and vendor best practice, so that Detection Engineering and SOC Operations can function reliably on top of them.
• Ensures client data is properly onboarded, parsed, and normalized to the appropriate data model for each platform (e.g., Splunk CIM, Microsoft ASIM, Google UDM).
• Diagnoses and resolves complex architectural problems across managed environments, including those that block or degrade downstream detection and analysis.
• Self-assigns and drives the most complex and highest-impact work, operating independently without requiring direction.
• Drives the engineering ticket queue with quality, efficiency, and completeness, resolving issues fully rather than partially.
• Designs, implements, and maintains engineering solutions for multi-tenant scalability, repeatability, and standardization across NuHarbor's client base, solving problems in a way that is durable and portable rather than one environment at a time.
• Communicates with clients at an expert technical level, building the trust and delivery excellence that turns clients into raving fans.
• Performs the engineering and architecture work required to onboard new managed services clients and to sustain and mature existing ones.
• Supports, deploys, and manages the components of NuHarbor's security automation and case management platform(s), including integrations across the managed stack (SIEM, EDR, identity, ticketing), configuration to best practice, and multi-tenancy.
• Builds and maintains automation workflows and integrations that connect the platform to client environments, partnering with SOC and Detection Engineering on the response logic those workflows execute.
• Regularly meets with clients to drive objectives forward and proactively addresses issues before they escalate.
• Develops engineering recommendations and enhancements that improve the security posture and effectiveness of each client's managed platforms, and communicates them to client stakeholders.
• Provides technical direction, leadership, and mentorship that measurably raises the capability of the broader engineering team.
• Provides architectural review and oversight for client operational projects.
• Develops and improves onboarding and operational processes, and builds processes to support new technologies at the direction of Engineering Leadership.
• Helps design the engineering approach and operational processes for newly adopted technologies, in support of new and evolving service offerings.
• Maintains the industry and vendor certifications required to support the managed services catalog, and ensures managed platforms are patched and hardened in response to relevant vulnerabilities.
• Participates in a 24x7 on-call rotation; other duties as assigned by Engineering Leadership.

Senior Security Engineer

Engineer

• The Vulnerability Engineer will drive the organization’s vulnerability management efforts, to identify, prioritize, and mitigate vulnerabilities across client's digital assets.
• Help customers reduce their organizational risk by discovering, validating, and prioritizing vulnerabilities and associated remediations.
• Lead efforts to configure, manage, and optimize vulnerability management tools to identify, assess, and prioritize vulnerabilities across an organization’s assets.
• Work closely with technology and security teams to ensure timely remediation of vulnerabilities in accordance with organizational risk thresholds and compliance requirements.
• Conduct regular risk assessments using vulnerability management tools to provide a clear understanding of the security posture across networks, web applications, and cloud infrastructure.
• Generate and present detailed reports, including executive-level summaries, that outline vulnerabilities, risk scores, and remediation progress.
• Analyze threat trends and advise on proactive measures for mitigation based on emerging threats that may impact the organization.
• Develop and implement automation for scanning, reporting, and remediation workflows to improve efficiency and reduce response times.
• Continuously evaluate and refine processes to ensure efficient delivery of services to the organization.
• Act as a key point of contact for stakeholders across the organization regarding platform capabilities, findings, and best practices.
• Work closely with security, risk, and IT operations teams to align vulnerability management activities with broader security initiatives.
• Mentor junior security team members on vulnerability management best practices, assisting in their professional development.
• Ensure that vulnerability platform and related integrations are maintained, updated, and optimized for peak performance.
• Troubleshoot issues within the platform and work with support if necessary to resolve complex problems.
• Stay current with the latest trends in vulnerability management.
• Participate in the evaluation of emerging tools and technologies that could enhance or complement capabilities within the organization.
• Use your advanced understanding of, and ability to communicate, security technologies to mitigate cyber risks.
• Develop recommendations and enhancements to mature a client’s cybersecurity program.
• Required to participate in 24x7 rotation.

Vulnerability Management Engineer

Security Operations

• Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House.
• Own investigations end-to-end from initial alert through root cause analysis and client-ready written narrative.
• Correlate across SIEM, EDR, and identity telemetry to identify missed alerts.
• Support the Security Analyst team with alert triage and escalation within SLA requirements.
• Communicate proactively with the Security Operations Manager on active threats and escalations.
• Produce ticket documentation without editorial cleanup.
• Remain current on emerging threats, CVEs, and attacker techniques.
• Train, mentor, and support junior analysts.
• Review escalations prior to client delivery, ensuring documentation quality.

Senior Security Engineer

Vulnerability Management Engineer

Senior Security Operations Analyst