Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 22 days ago

Staff Security Engineer I

JDA40 open roles

Pay
$114,104 – $143,896 a year
Where
Dallas
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff Security Engineer IJDA · Dallas

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on JDA's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market. JDA postings stay open a median of 3 days.

Share of postings closed within
  1. 1.7%1 day
  2. 3.6%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 34.0%30 days
This job: posted 22 days ago

JDA median: 3 days open

The posting

Role: Staff Security Engineer I

Location: Dallas, TX highly preferred but US Remote will be considered

Overview:

The Cyber Defense Engineering team at Blue Yonder owns the security tooling that protects the organization's multi-cloud estate across nine business units. As the platform engineering team behind the SOC, we implement, administer, and continuously evolve the technologies that enable effective detection, response, and protection across our enterprise security ecosystem.

We are seeking a Staff Security Engineer I to serve as a key contributor across endpoint security, security platforms, cloud security, and automation initiatives. This hands-on engineering role will have primary ownership of our CrowdStrike Falcon platform while supporting critical technologies across our cyber defense stack. You will be responsible for maintaining platform health, onboarding and operationalizing new security tools, driving automation through scripting and APIs, troubleshooting complex technical issues, and continuously improving the experience and effectiveness of our analysts and security operations teams.

What You’ll Do:

  • Own the CrowdStrike Falcon stack end to end. Administer the full platform, EDR/NGAV, Identity Protection, Exposure Management, Cloud Security, NGSIEM (LogScale), Fusion SOAR, and Counter Adversary Operations — under our Falcon Complete license. Manage sensor health, policies, exclusions, and the sensor update lifecycle across a multi-cloud fleet (VMware, Azure, AWS, GCP, OCI).
  • Implement new tools within the cyber defense scope. Lead the deployment, integration, and ongoing administration of new security platforms as the team adopts them, from proof-of-concept through to production operating model, documentation, and handover.
  • Engineer and maintain data flows. Build and maintain log ingestion pipelines into NGSIEM, onboard new sources across cloud and on-prem, and keep parsing, normalization, and connectors reliable. Investigate and resolve ingestion gaps, duplication, and attribution issues.
  • Keep the platform running. Own platform health, patching/upgrades, configuration governance, and capacity. Diagnose and resolve issues quickly, and drive complex problems to root cause, including working escalations with vendor TAMs and support.
  • Automate and orchestrate. Use Fusion SOAR (and adjacent automation) to eliminate manual toil, enforce lifecycle policies, and streamline provisioning and response workflows.
  • Bring AI into the workflow. Actively adopt AI-driven capabilities to raise the team's speed and quality — leverage platform-native AI (e.g., CrowdStrike Charlotte AI) for triage, investigation, and querying, and apply AI assistants and agentic tooling to accelerate scripting, documentation, and operational analysis. Help the team evaluate where AI genuinely improves detection engineering and administration versus where it doesn't.
  • Ease the life of analysts. Partner closely with the SOC to tune detections, reduce noise, standardize workflows, and remove operational friction. Translate analyst pain points into platform improvements.
  • Govern access and configuration. Manage role-based access, user and API lifecycle, and least-privilege enforcement across the security toolset.
  • Document and communicate. Produce clear operational runbooks, process documents, and design write-ups, and communicate effectively with both technical peers and leadership stakeholders.

What We’re Looking For:

Required:

  • 6+ years in security engineering, security administration, or a closely related infrastructure/operations role.
  • Hands-on administration experience with CrowdStrike Falcon (or a comparable enterprise EDR/XDR platform), sensor management, policy configuration, and troubleshooting at scale.
  • Working knowledge of SIEM/log management concepts; ingestion, parsing, normalization, and query, ideally with NGSIEM/LogScale or a comparable platform (Splunk, Sentinel, Elastic).
  • Practical experience across at least one major cloud (Azure, AWS, GCP, or OCI), including how logging and telemetry are produced and collected.
  • Strong troubleshooting instincts and the ability to drive incidents to root cause under pressure.
  • Scripting/automation ability (Python, PowerShell, or similar) and comfort working with REST APIs.
  • Exposure to email security tooling (e.g., Proofpoint) or other cyber defense platforms.
  • Fluency with AI tools in day-to-day work, using AI assistants for scripting, analysis, and documentation, and a willingness to adopt AI-driven security capabilities as they mature.
  • Clear written and verbal communication; able to document processes and work with cross-functional stakeholders.

Preferred:

  • Experience with SOAR/orchestration platforms (Fusion SOAR or comparable) and building automation workflows.
  • Familiarity with identity protection, cloud security posture (CSPM/CNAPP), or exposure/vulnerability management tooling.
  • Experience onboarding and standing up new security tools from POC to production.
  • Deception technology implementation experience; deploying and administering deception/ITD platforms (e.g., Proofpoint Deception) to detect lateral movement and identity-based attacks.
  • Experience applying AI/ML or AI-driven security tooling (e.g., Charlotte AI or comparable) to detection, investigation, or operational automation.
  • Relevant certifications — CrowdStrike (CCFA/CCFR/CCFH), cloud (AZ-500, AWS Security, GCP Security), or security fundamentals (Security+, GCIH, GCED).

#LI-MH1

#LI-Remote

-------------------------------------------

The annual salary range for this position is $114,103.81 - $143,896.18

The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:

  • Comprehensive Medical, Dental and Vision
  • 401K with Matching
  • Flexible Time Off
  • Corporate Fitness Program
  • A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against JDA's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on JDA's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    JDA's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.