Posting DetailsPosting Details
LogoInstitution The University of South Dakota
Working Title Cybersecurity Engineer
Posting Number CSA02866P
Department USD - Information Technology Services
Physical Location of Position (City) Vermillion
Posting Text The University of South Dakota is seeking an experienced, hands-on Cybersecurity Engineer to join its established enterprise cybersecurity program.
This position is ideal for a cybersecurity professional who enjoys solving complex technical problems, investigating security threats, engineering security solutions, and using automation and artificial intelligence to improve security operations.
Working directly with the Chief Information Security Officer (CISO), the Cybersecurity Engineer will play an important role in operating, optimizing, and advancing the university's cybersecurity capabilities.
USD operates a modern, integrated security environment built around Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Microsoft 365, and Cisco security technologies. The university is also advancing AI-enabled security operations, integrating automation and intelligent security agents into threat detection, investigation, and response.
We are looking for an experienced professional who can make meaningful technical contributions from the outset, independently investigate security threats, implement security improvements, and work effectively within a small, highly technical security team.What You'll Do- Security Operations: Investigate and respond to security incidents using Microsoft Defender XDR, Microsoft Sentinel, Cisco XDR, and related security technologies.
- Security Engineering: Configure, maintain, troubleshoot, and optimize enterprise security controls across endpoints, identities, networks, cloud services, and data environments.
- Automation and AI: Develop automated investigation and response workflows using scripting, APIs, orchestration tools, and emerging AI-enabled security technologies.
- Threat Detection and Hunting: Develop and refine detection rules, KQL queries, alert correlations, dashboards, and investigation procedures.
- Vulnerability Management: Identify, prioritize, and coordinate the remediation of security vulnerabilities across enterprise systems.
- Identity and Data Protection: Support technical security controls within Microsoft Entra ID, Microsoft Purview, and Microsoft 365.
- Incident Response: Work with internal IT teams and external security partners to investigate, contain, and remediate cybersecurity incidents.
- Continuous Improvement: Identify opportunities to strengthen existing security configurations, integrate technologies, and reduce manual operational effort.
What We're Looking ForWe are seeking an experienced engineer who has already worked directly with enterprise security technologies and can independently execute technical security responsibilities.
Required Qualifications- Five or more years of relevant professional IT or cybersecurity experience, including at least three years in hands-on cybersecurity operations or engineering.
- Practical experience investigating and responding to cybersecurity incidents in an enterprise environment.
- Hands-on experience administering or operating Microsoft Defender XDR or comparable enterprise endpoint detection and response technologies.
- Experience using a SIEM platform to investigate security events, correlate data, and analyze threats.
- Demonstrated ability to investigate technical security problems and implement effective remediation.
- Experience with vulnerability management and risk-based remediation.
- Working knowledge of security scripting, APIs, or automation technologies.
- Ability to independently manage technical assignments, troubleshoot security issues, and collaborate with infrastructure and application teams.
Preferred Qualifications- Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel, and Kusto Query Language (KQL).
- Experience with Microsoft Purview, Entra ID, Conditional Access, and Microsoft 365 security.
- Experience with Cisco Secure Access, Cisco XDR, or related Cisco security platforms.
- Experience using PowerShell, Python, Power Automate, Logic Apps, or security orchestration technologies.
- Familiarity with AI-enabled cybersecurity tools, Microsoft Security Copilot, Copilot Studio, or agent-based security automation.
- Experience integrating multiple security technologies through APIs or automated workflows.
- Experience working with managed detection and response providers.
- Certifications such as Microsoft SC-200, Security+, CySA+, CISSP, or equivalent.
The position may require occasional after-hours work and participation in an on-call rotation. Must be authorized to work in the U.S. Sponsorship is not available for this position
Posting Date
10/20/2026
Closing Date
Open Until Filled
Yes
First Consideration Date
11/03/2026
Advertised Salary
commensurate with qualifications
Duration of the Term
12 months
If Other, describe duration
Appointment Percent
100
Work Hours
Normal business hours with frequent on call duties
Typical Hours Worked Per Week
Appointment Type
Regular
Scope of Search
External (includes Internal)
If internal, define scope of search
This position requires
No Requirement
If other, please indicate
Department Description and Cultural Expectations
Contact Information 
