Security Engineer

We are seeking a hands-on, highly skilled Security Engineer to own day-to-day Security Operations Center (SOC) workflows, threat management, and core security infrastructure. In this role, you will take full operational ownership of incident monitoring, detection, and response across our network, endpoints, and email environments. The ideal candidate brings strong expertise in Palo Alto Networks infrastructure, deep operational experience with EDR/XDR platforms, and proven capability in mitigating email-borne threats. This role will also leverage AI-assisted security tools and automation to improve threat analysis, accelerate investigations, streamline repetitive tasks, and enhance overall SOC efficiency.

Responsibilities

• Lead daily SOC monitoring, alert triage, log analysis, and incident investigations.
• Drive incident response from initial detection through root-cause remediation and post-incident reporting.
• Manage, tune, and maintain Palo Alto firewalls, security policies, SSL decryption, App-ID/User-ID configurations, and threat prevention features.
• Own deployment, agent health, policy tuning, and threat hunting across our EDR platform to protect all enterprise endpoints.
• Oversee email security gateway solutions, defending against phishing, Business Email Compromise (BEC), account takeover attempts, and malicious attachments/URLs.
• Continuously refine SIEM/XDR alert rules, reduce false positives, and automate manual incident response playbooks.
• Conduct recurring vulnerability scans, prioritize patching with IT operations, and assess emerging threat intelligence for risks to the environment.
• Maintain incident response runbooks, threat models, architectural diagrams, and operational procedures to ensure continuous coverage.
• Direct experience managing enterprise EDR platforms (e.g., Palo Alto Cortex XDR, CrowdStrike, Defender for Endpoint, SentinelOne).

Requirements

• Irving,Texas- Hybrid (3 days a week onsite) Work Authorization Requirement: Candidates must be legally authorized to work in the United States without current or future employer sponsorship.
• Shermco does not provide visa sponsorship for this position.
• 4–7+ years of dedicated hands-on experience in cybersecurity, security operations, or threat engineering.
• Strong experience configuring, administering, and troubleshooting Palo Alto Networks firewalls and Panorama.
• PCNSE certification is a strong plus.
• Proven experience configuring and tuning advanced email security platforms (e.g., Proofpoint, Mimecast, Defender for Office 365, Abnormal).
• Calm under pressure during active incidents, strong technical troubleshooting abilities, and clear communication skills when reporting risks to IT leadership.

Preferred

• Deep understanding of TCP/IP, OSI model, DNS, active directory/identity access concepts, and common attack vectors (MITRE ATT&CK framework).
• Certifications ​Palo Alto Networks Certified Network Security Engineer (PCNSE) ​GIAC Certifications (GCIH, GCFA, or GCDA) ​CompTIA Security+ or CySA+ EQUAL OPPORTUNITY EMPLOYER | DRUG-FREE WORKPLACE Shermco is an Equal Opportunity Employer.
• Shermco is a drug-free workplace.

Pay

NO AGENCIES PLEASE Pay Range USD $110,000.00 - USD $125,000.00 /Yr.

Preferred

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.