CYBERSECURITY ENGINEER - 72004172 1

Requisition No: 875040 

Agency: Management Services

Working Title: CYBERSECURITY ENGINEER - 72004172 1

 Pay Plan: Career Service

Position Number: 72004172 

Salary:  $80,000 - $115,000 

Posting Closing Date: 05/05/2026 

Total Compensation Estimator Tool

Cybersecurity Engineer
Florida Digital Service
State of Florida Department of Management Services
This position is located in Tallahassee, FL

 

Position Overview and Responsibilities:

 

The Cybersecurity Engineer provides hands-on technical support for the development, implementation, and sustainment of enterprise security tooling and telemetry pipelines that enable SOC detection, analysis, and incident response operations. This role is responsible for configuring, maintaining, and optimizing security platforms, detections, and data flows to ensure accurate, reliable, and actionable security monitoring.

Working under the direction of the Engineering Team Lead, the Cybersecurity Engineer supports both current-state enterprise security platforms and the transition to modernized, integrated SOC tooling. The role requires practical experience with security technologies, telemetry sources, and detection logic, as well as the ability to troubleshoot technical issues and support operational workflows.

 

Key Responsibilities:

 

Security Tooling and Platform Support – 30%

• Configure, maintain, and support enterprise security tools, including SIEM, data platforms, SOAR, and related detection and telemetry systems.
• Support ingestion, parsing, normalization, and retention of security telemetry to ensure data is usable for detection and investigation.
• Monitor performance and availability of security tooling and identify issues impacting SOC operations.
• Assist in evaluating telemetry sources for relevance, quality, and operational usefulness. 

 

Detection Engineering and Telemetry Implementation – 20%

• Develop, implement, and maintain SIEM detections using structured detection logic and defined standards.  
• Support tuning and validation of detection rules to improve accuracy, reduce false positives, and ensure operational effectiveness. 
• Assist in translating detection requirements into platform-specific implementations.
• Support testing and validation of detections and telemetry pipelines in development and production environments.

 

Engineering Operations and Incident Support -20%

• Support day-to-day engineering operations that enable SOC detection, response, and analytic workflows.
• Troubleshoot and resolve technical issues related to security tools, integrations, and telemetry pipelines.
• Assist in root-cause analysis of detection failures, data gaps, or platform issues.
• Provide technical support during incident response activities where tooling or telemetry expertise is required.

 

Configuration, Integration, and Lifecycle Management – 10%

• Implement and maintain configurations for security tools and integrations in alignment with established standards and architecture.
• Support deployment, updates, and lifecycle management of detections, data sources, and platform components
• Assist in integrating new telemetry sources and security capabilities into existing platforms.
• Follow established change management and configuration management processes.

 

Documentation and Continuous Improvement – 10%

• Develop and maintain technical documentation, runbooks, and standard operating procedures.
• Identify opportunities to improve detection coverage, telemetry quality, and platform performance.
• Support continuous improvement initiatives related to security tooling, engineering processes, and SOC enablement.
• Participate in testing and validation of new tools, features, or integrations.

 

Coordination and Collaboration – 10%

• Wor