Cyber Engineer III

Our team members are the key to our company’s success, and their health and well-being, as well as that of their families, is very important to us. We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance. Benefits may vary with employment status. To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits

Job Description:

At Seminole Hard Rock Support Services, we are on a mission to protect our guests, team members, and enterprise assets through world-class cybersecurity practices. As the Cybersecurity Engineer , you will implement, operate, and continuously improve the security controls that defend our systems, networks, and cloud environments across the enterprise, turning architecture and policy into running, automated, measurable defenses.

Reporting to the Manager of Cybersecurity Engineering, this role requires a hands-on, security-minded engineer who bridges the worlds of software development, cloud operations, and cybersecurity. You will configure and tune the enterprise security stack, build the integrations and automations that connect it together, and leverage AI to analyze security data at scale across Microsoft Azure (primary), Amazon Web Services, and Google Cloud.

This is a builder’s role, not an architecture role. You do not define standards from the sidelines, you take reference architectures and security requirements and make them real: deploying controls, writing production-grade automation, and instrumenting the telemetry that turns raw events into actionable insight. Your software development and architecture background lets you treat security operations as an engineering problem, and your fluency with AI and large language models lets you accelerate detection, triage, and analysis far beyond manual effort.

You will work across systems, network, and cloud security domains, partnering with architecture, IAM, infrastructure, application, and SOC teams to ensure controls are deployed consistently, operate reliably, and improve continuously across all Seminole Hard Rock business units. You measure your impact in risks reduced, incidents prevented, and manual effort eliminated through automation.

Responsibilities

Systems & Endpoint Security

Deploy, configure, and tune endpoint and extended detection and response controls across Windows and Linux server and endpoint fleets, keeping coverage complete and policies current

Operate identity threat detection and privileged-access protections, investigating and responding to identity-based threats

Implement and automate certificate, PKI, secrets, and non-human / machine-identity lifecycles

Maintain authoritative asset inventory and continuously reconcile attack-surface visibility across the environment

Harden system configuration baselines and remediate drift in partnership with infrastructure and platform teams

Network Security

Configure and operate secure-access service edge, secure web gateway, CASB, and DLP controls, and enterprise remote access

Manage edge and perimeter defenses: web application firewall, DDoS mitigation, and CDN policy, and API security posture and runtime protection

Deploy and tune network detection and response, triaging anomalous activity and feeding findings to the SOC

Operate the enterprise browser to enforce least-privilege, isolated access to sensitive applications via an enterprise browser platform

Apply zero-trust segmentation and least-privilege access principles consistently across the network estate

Cloud & SaaS Security

Implement and maintain cloud-native application protection and posture management across Azure (primary), AWS, and Google Cloud, remediating misconfigurations and preventing drift

Govern SaaS security posture and contain non-human identity sprawl across the SaaS estate

Operate data security posture, data access governance, and data discovery and classification across cloud and on-premises stores

Implement cloud-native guardrails, least-privilege IAM, encryption, and logging baselines in partnership with cloud engineering

Integrate security checks into infrastructure-as-code and deployment workflows so cloud workloads are secure by default

Security Automation, AI & Detection Engineering

Build and maintain security automations, integrations, and response playbooks across the stack using APIs and SOAR

Engineer telemetry pipelines that route, shape, and enrich security data for cost-effective analysis, and develop and tune detections and SIEM content

Leverage AI/ML and large language models to analyze large volumes of security data, accelerate alert triage and enrichment, surface anomalies, and automate reporting and documentation

Develop and maintain production-grade scripts, services, and tooling (e.g., Python, PowerShell, Go) that operationalize security controls and eliminate repetitive manual work

Instrument metrics and dashboards that make control coverage, detection efficacy, and remediation timeliness measurable

Vulnerability, Exposure & Human-Risk Defense

Operate the vulnerability management lifecycle end-to-end: scanning, risk-based prioritization, tracking, and verification of remediation

Coordinate penetration testing and manage findings through to closure

Monitor external attack surface, threat exposure, and credential/brand leakage, and track third-party and vendor risk

Operate email defenses, tuning detection and response for phishing and account-takeover threats

Support security awareness and phishing-simulation programs with the data and integrations they need

Collaboration & Continuous Improvement

Partner with Cybersecurity Architecture, IAM, infrastructure, application, and SOC/MSSP teams to deploy controls consistently and resolve issues quickly

Support GRC, audit, and privacy programs by automating evidence collection and continuous control monitoring

Document standards, runbooks, integration designs, and operating procedures so controls are repeatable and supportable

Research, prototype, and pilot emerging tools and AI-driven capabilities that improve detection, automation, and analyst efficiency

Participate in an on-call rotation and incident response for a 24/7 gaming and hospitality environment

Qualifications & Experience

5–7+ years of combined experience in cybersecurity engineering, systems / network / cloud administration, or software / platform engineering, with at least 4+ years focused on hands-on security engineering in enterprise environments

Strong software development proficiency , with hands-on experience in Python, PowerShell, Go, or similar languages, and the ability to build custom security tooling, integrations, and automation from scratch

Deep infrastructure and systems expertise , with hands-on experience securing and operating workloads across IaaS, PaaS, and containerized (Docker, Kubernetes) environments on Microsoft Azure (required), with working experience in AWS and/or Google Cloud, across Linux and Windows

Practical experience applying AI/ML or large language models to security data analysis, detection, triage, or automation

Strong working knowledge of endpoint / XDR, identity and privileged access, network security (proxies, VPN, WAF, NDR, API security), and cloud security posture management

Solid grasp of the vulnerability management lifecycle end-to-end, plus exposure and third-party risk monitoring

Deep networking and systems fundamentals: TCP/IP, DNS, TLS/PKI, firewalls, segmentation, and zero-trust access models

Experience integrating security tools and data sources via API, with familiarity in SOAR and SIEM content development

Familiarity with regulatory and compliance frameworks relevant to gaming and hospitality (PCI-DSS, SOX, tribal gaming regulations, GLBA), preferred but not required

Relevant certifications p