6 jobs found

We are Lennar Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500 company and consistently ranked among the top homebuilders in the United States. Join a Company that Empowers You to Build Your Future We are seeking a highly skilled and experienced Senior SOC Analyst to join our cybersecurity team. This role is critical in leading advanced incident response efforts, managing escalations from cross functional teams and working closely with our MDR partner to ensure rapid detection, containment, and remediation of security threats. The ideal candidate will have deep technical expertise, strong analytical skills, and a proactive mindset toward incident response and continuous improvement. A career built on defending digital infrastructure. A career focused on proactive threat detection and response. A career that protects critical assets and enables secure business operations. Your Responsibilities on the Team Incident Response & Threat Management Lead investigations of complex, high severity security incidents from detection through containment, remediation, and recovery, coordinating across internal teams and the MDR partner. Act as the primary escalation point for Tier 3 alerts and incidents and perform root cause analysis with actionable remediation plans. Serve as the primary liaison to the MDR provider: validate and triage MDR alerts, ensure alignment on response protocols and escalation procedures, and provide tuning recommendations to improve detection fidelity. Develop and maintain incident response playbooks, runbooks, and workflows. Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into improved defenses and detection content. Threat Hunting Conduct proactive, hypothesis-driven threat hunts across endpoint, identity, network, and cloud telemetry, leveraging threat intelligence and the MITRE ATT&CK framework to surface threats that evade automated detection. Operationalize hunt findings into durable detection logic and response procedures. Automation & Process Improvement Identify recurring, manual, or manual heavy SOC processes and design automation to reduce analyst effort and accelerate response. Build, test, and maintain automated playbooks and response workflows in a SOAR platform (e.g., Torq, Microsoft Sentinel Automation Rules and Logic Apps) for enrichment, triage, containment, and case management. Develop, tune, and operationalize detection and correlation rules through automated validation and deployment. Measure the impact of automation against SOC performance metrics (MTTD, MTTR, alert volume, false-positive rate) and iterate based on results. Partner with Detection Engineering and Security Engineering to integrate tooling, close telemetry gaps, and standardize repeatable response. Security Monitoring & Analysis Monitor and analyze logs and alerts across SIEM, EDR, identity, and cloud platforms. Correlate data across multiple sources to identify patterns, anomalies, and emerging threats. Maintain situational awareness of the external threat landscape and internal security posture. Mentorship & Reporting Mentor Tier 1 and Tier 2 analysts, lead knowledge-sharing, and uplevel team investigative tradecraft and tooling proficiency. Document incident timelines, findings, and lessons learned. Track, analyze, and drive improvement of core SOC performance metrics (MTTD, MTTR, detection coverage, false-positive rate), and use them to prioritize tuning and automation efforts. Generate executive-level and technical reports on SOC performance and incidents, and support compliance and audit efforts through accurate record-keeping and evidence handling. Requirements Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier 2/Tier 3 SOC or escalation capacity. CompTIA Security+ or equivalent. Proven experience leading incident response triage, investigation, and remediation, including working directly with MDR partners. In-depth knowledge of security tools and technologies, including SIEM/SOAR platforms (e.g., Microsoft Sentinel), endpoint detection and response solutions (e.g., Microsoft Defender XDR, Palo Alto Cortex XDR), and ticketing systems (e.g., ServiceNow). Demonstrated ability to author and tune detection content (e.g., KQL in Sentinel/Defender) and operationalize it into production. Experience analyzing cloud security telemetry (e.g., Azure/Entra sign-in logs, AWS CloudTrail). Hands-on experience building or maintaining automated playbooks and response workflows in a SOAR platform. Strong understanding of network security concepts, operating systems, and malware analysis techniques. Familiarity with the MITRE ATT&CK framework and threat intelligence platforms. Excellent analytical, problem-solving, and communication skills, with the ability to work under pressure and manage multiple priorities. Preferred Certifications such as CISSP, GCIA, GCIH, GCFA, CySA+, eJPT/PJPT, CEH, SC-200. Scripting and automation skills (Python, PowerShell) for tooling, enrichment, and analysis. Experience supporting an EDR platform migration (e.g., Cortex XDR to Microsoft Defender XDR). Experience with or strong interest in AI-assisted triage and agentic SOC tooling to augment analyst workflows. Broader cloud security experience across AWS, Azure, and OCI. Experience with Microsoft Sentinel, Proofpoint, and Palo Alto Cortex XDR. Work Environment Mandatory 4-days onsite; 1-days remote. On-call rotation may be required for critical incident response. Collaborative team environment with opportunities for growth and specialization. This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Life at Lennar At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone's Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar's policies and applicable plan terms. Visit to view our suite of benefits. Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview LinkedIn for the latest job opportunities. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

Position: Sr. Engineer Location: Fort Worth, Texas Duration: Contract Job Overview: As a Sr. Engineer, you will play a critical role in building and maintaining core platform components that power agentic AI systems. This position involves developing APIs, microservices, and orchestration services, as well as integrating AI/ML models into production systems. The ideal candidate will have a strong background in software engineering, cloud platforms, and AI/ML application development. This is a hybrid role requiring onsite work three days a week and virtual work for two days. Responsibilities: Develop and maintain agent orchestration services, tool registries, and execution runtimes. Build APIs and microservices for LLM integration, prompt management, and agent lifecycle management. Implement observability, logging, and monitoring for agentic workflows. Write comprehensive tests (unit, integration, end-to-end) to ensure platform reliability. Collaborate with architects on design decisions and ML engineers on model integration. Participate in on-call rotations for production support of the AI platform. Contribute to CI/CD pipelines, infrastructure-as-code, and deployment automation. Qualifications: 5+ years of software engineering experience with strong proficiency in Python and working knowledge of at least one of Java, Go, or TypeScript. Hands-on experience building production REST/gRPC APIs and microservices. Solid experience with cloud platforms (AWS or Azure preferred), containerization (Docker/Kubernetes), CI/CD pipelines, and infrastructure-as-code (Terraform, CloudFormation, or Pulumi). Working experience with LLM integration patterns, prompt engineering, or AI/ML application development. Familiarity with frameworks like LangChain, LangGraph, or similar orchestration tools. Nice to Have Skills: Experience with event-driven architectures (Kafka, EventBridge). Knowledge of vector databases and observability tools (Datadog, Splunk, OpenTelemetry). Familiarity with agent evaluation frameworks, FastAPI/Flask, async Python, and Redis/caching patterns. Experience in the airline or travel industry. What Makes a Great Candidate? A great candidate is a solid mid-level to senior engineer who writes clean, testable code and has a genuine curiosity about AI/ML systems. While deep ML expertise is not required, the candidate should understand how LLMs work, recognize agentic patterns, and build reliable services around non-deterministic components. They take ownership, write good tests, communicate clearly in code reviews, and are comfortable operating production systems. About PTR Global: PTR Global is a leading provider of information technology and workforce solutions. PTR Global has become one of the largest providers in its industry, with over 5000 professionals providing services across the U.S. and Canada. For more information visit At PTR Global, we understand the importance of your privacy and security. We NEVER ASK job applicants to: Pay any fee to be considered for, submitted to, or selected for any opportunity. Purchase any product, service, or gift cards from us or for us as part of an application, interview, or selection process. Provide sensitive financial information such as credit card numbers or banking information. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup. Pay Range: $55 - $60 The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work. If you receive a suspicious message, email, or phone call claiming to be from PTR Global do not respond or click on any links. Instead, contact us directly at +1 . To report any concerns, please email us at During the hiring process, we may use artificial intelligence (AI) tools to assist in evaluating information related to your application. These tools may help analyze job-related qualifications or assist recruiters in reviewing applications and interview responses. AI-generated information is one factor considered in our hiring process. Final employment decisions are made by qualified hiring personnel and are not based solely on AI-generated recommendations.

Hi, Hope you are doing well. We have a full time opportunity with one of our major clients. They are looking for Cribl Engineer Expert role. Position: Cribl Engineer Expert Location:, Reston, VA, (5 Days Onsite) Duration: full time opportunity Required: TS/SCI clearance with the ability to obtain a counterintelligence (CI) polygraph. Job Description: Job Summary: We are seeking a highly experienced Cribl Engineer to serve as the principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge. This role is designed for a senior technologist with deep expertise in log/telemetry routing, large-scale data engineering, and enterprise-grade observability architectures. You will shape pipeline strategy, design complex routing and transformation logic, drive platform reliability, mentor senior engineers, and serve as the top technical escalation point for Cribl-related challenges. Key Responsibilities: Lead architecture and design for Cribl Stream/Edge across multiple enclaves and data domains. Build high throughput pipelines (multiTB/day) with advanced routing, filtering, enrichment, and replay workflows. Optimize system performance, worker topology, CPU/memory distribution, queues, and transport mechanisms. Engineer secure data flows with masking, tokenization, RBAC, PKI/TLS, and other governance controls. Integrate pipelines with SIEM/analytics ecosystems (Splunk, Elastic, SaaS telemetry platforms, cloud services). Develop HA/DR patterns, reliability frameworks, fleet health metrics, and failure mode response processes. Maintain reusable Cribl packs, shared patterns, runbooks, and operational standards. Serve as the senior escalation point for Cribl issues; interface with vendor engineering as required. Mentor engineers, conduct design reviews, drive engineering excellence, and enforce architectural standards. Support cross functional teams (security, cloud, analytics, infrastructure) on logging and telemetry strategy. Required Qualifications: 10+ years of experience in logging, observability, or SIEM engineering. 5+ years architecting enterprise scale log/telemetry pipelines. 3+ years hands-on with Cribl Stream and Cribl Edge in production environments. Demonstrated success operating and scaling pipelines at 5-10+ TB/day. Expert-level experience with Splunk forwarding/ingestion, source type management, and indexing practices. Strong Linux fundamentals; scripting expertise (Python/Bash); Git; automation (Ansible/Terraform). Strong understanding of transport protocols (HTTP, TCP, TLS/MTLS), Kafka, S3/object storage. Experience designing secure data flows, including encryption, RBAC, secrets management, and compliance controls. Demonstrated ability to mentor senior engineers and lead technical decision making. Certified Cribl Certified Engineer (CCOE) or equivalent Cribl product expertise. Must possess the following DoD 8570.01-M certifications or be willing to obtain within 30 days of hire: Information Assurance Technician (IAT) Level II certification (currently Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND). IAT Level III certification requirements (currently CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH). Cyber Security Service Provider (CSSP) - Infrastructure Support (IS) certification requirements (currently CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND). Must possess a TS/SCI with Polygraph Preferred Qualifications: Expertise creating and maintaining Cribl Packs and reusable pipelines. Experience with cloud telemetry (AWS, Azure, hybrid) and cross-domain data movement patterns. Familiarity with NIST / CIS control frameworks and secure engineering practices. Experience building observability frameworks for large distributed systems. Vendor engagement experience (Cribl PS, product teams, troubleshooting escalations). Benefits: Competitive salary and performance-based bonuses. Comprehensive health, dental, and vision insurance. Opportunities for professional development and continuous learning.