Job Summary
The Senior Cybersecurity Engineer is a senior-level technical position within Camden’s Information Technology Department responsible for the design, implementation, administration, monitoring, and continuous improvement of enterprise security technologies and infrastructure protection controls.
This role provides hands-on engineering ownership for security platforms, vulnerability and exposure management, infrastructure hardening, cloud and identity security, automation, audit support, and incident response. The position works closely with infrastructure, cloud, networking, application development, operations, audit, and business teams to ensure Camden systems, applications, data, and technology services are protected against evolving threats.
The Senior Cybersecurity Engineer is expected to operate with a high degree of technical independence, serve as a subject matter expert for security engineering and control implementation, and contribute to security roadmaps, standards, documentation, and operational procedures. This role bridges traditional security analyst responsibilities with broader systems and security engineering duties, helping ensure Camden maintains secure, resilient, and supportable technology environments.
Essential Functions
Security Engineering and Platform Administration
Design, implement, maintain, and optimize enterprise security controls and technologies across endpoint, server, network, identity, cloud, and application environments.
Administer and support security platforms used for detection, prevention, monitoring, vulnerability assessment, asset visibility, endpoint protection, log collection, correlation, alerting, and reporting.
Develop and maintain secure configuration baselines, system hardening standards, security control procedures, and technical implementation guidance.
Research, evaluate, test, and recommend new or improved security technologies that support Camden business needs and reduce risk.
Participate in technology architecture reviews, solution design sessions, and project planning activities to ensure appropriate security controls are included early in the lifecycle.
Author and maintain technical documentation, architecture diagrams, operational runbooks, standards, and procedures related to systems and security platforms.
Vulnerability and Exposure Management
Lead or support continuous asset discovery, vulnerability assessment, prioritization, remediation tracking, and exposure management across enterprise technology environments.
Prioritize remediation based on business risk, exploitability, criticality, compensating controls, threat intelligence, and operational impact.
Partner with infrastructure, application, database, cloud, and business teams to drive timely remediation of vulnerabilities and security configuration findings.
Validate remediation completion through vulnerability rescans, manual verification, control testing, and supporting evidence review.
Develop recurring vulnerability metrics, dashboards, and management reporting that clearly communicate risk reduction, remediation progress, and areas requiring leadership attention.
Assist with attack surface reduction, secure configuration validation, legacy system risk review, and technical remediation planning.
Security Monitoring, Investigation, and Incident Response
Analyze, troubleshoot, and investigate security events, alerts, system anomalies, suspicious activity, network traffic, endpoint telemetry, cloud logs, and automated security notifications.
Participate in incident response activities including triage, investigation, containment, eradication, recovery, documentation, and post-incident improvement efforts.
Support the Security Incident Response Team during security events, tabletop exercises, and response planning activities.
Assist with detection engineering, log source validation, alert tuning, threat hunting, and security monitoring use case development.
Coordinate with internal IT teams, managed service providers, vendors, and other partners during incident investigations and technical response activities.
Document root cause, business impact, technical findings, corrective actions, and lessons learned from security events.
Cloud, Identity, and Microsoft Security
Support security controls and operational processes across Microsoft 365, Azure, Entra ID, Defender, Sentinel, and related cloud-hosted services.
Assist with identity governance, privileged access, conditional access, multi-factor authentication, passwordless authentication, role-based access control, and Zero Trust initiatives.
Review cloud and SaaS configurations for alignment with Camden security standards, regulatory needs, and industry best practices.
Monitor cloud security posture, recommend remediation activities, and collaborate with platform owners to reduce misconfiguration and identity-related risk.
Support secure onboarding and operational review of new cloud services, integrations, applications, and third-party technology platforms.
Security Automation and Operational Improvement
Develop and maintain automation using PowerShell, Python, APIs, workflow tools, and cloud-native automation capabilities to improve security operations and reporting.
Automate security reporting, asset inventory reconciliation, vulnerability discovery, evidence collection, compliance validation, alert enrichment, and operational workflows where appropriate.
Identify opportunities to reduce manual effort, improve repeatability, increase accuracy, and strengthen operational controls.
Create or enhance dashboards, reports, and scripts that improve visibility into security posture and operational performance.
Support integrations between security platforms, infrastructure systems, ticketing processes, monitoring tools, and reporting solutions.
Governance, Risk, Compliance, and Audit Support
Support internal audit, external audit, SOX compliance, security control assessments, and technology risk management activities.
Assist with evidence gathering, control validation, remediation tracking, and documentation for security and infrastructure controls.
Participate in third-party security reviews, vendor risk assessments, technology due diligence, and security requirements discussions.
Develop, maintain, and improve information security procedures, standards, technical guidance, and operational documentation.
Support disaster recovery, business continuity, continuity of operations, and resilience exercises involving security and infrastructure platforms.
Provide management with clear, risk-based recommendations regarding ongoing needs, issues, technology improvements, and process optimization opportunities.
Technical Leadership and Collaboration
Serve as a technical subject matter expert for security engineering, infrastructure protection, vulnerability management, and enterprise security controls.
Lead medium-sized security and technology initiatives from requirements gathering through implementation, documentation, and operational handoff.
Mentor analysts, engineers, administrators, and junior team members on security technologies, troubleshooting methods, and secure operational practices.
Build strong working relationships with infrastructure, applications, service desk, networking, database, audit, compliance, and business stakeholders.
Communicate technical concepts, risk, remediation options, and project status effectively to both technical and non-technical audiences.
Provide off-hours support as needed for urgent security events, critical system issues, maintenance activities, or business-impacting incidents.
Requirements
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field preferred.
Equivalent combination of education, certifications, and professional experience may be considered.
Seven or more years of progressive Information Technology experience preferred.
Five or more years of experience in cybersecurity engineering, infrastructure security, security operations, vulnerability management, systems administration, or related technical areas preferred.
Experience supporting enterprise security platforms, Microsoft-centric environments, cloud services, identity systems, and infrastructure operations.
Experience working with cross-functional technical teams to remediate findings, implement controls, deliver projects, and support production technology environments.
Knowledge, Skills, and Abilities
Strong understanding of enterprise computing environments, distributed applications, cloud services, identity systems, networking, endpoint security, and system hardening practices.
Ability to analyze complex technical problems, identify root cause, recommend practical solutions, and communicate recommendations clearly.
Ability to balance risk reduction, business priorities, operational constraints, and user experience when recommending security improvements.
Strong written and verbal communication skills with the ability to communicate effectively across technical teams, business stakeholders, and leadership.
Ability to successfully manage time, technical responsibilities, competing priorities, and deliverable deadlines in a collaborative environment.
Demonstrated ability to document technical processes, create diagrams, develop standards, and contribute to repeatable operational procedures.
Must maintain strict confidentiality and security of personnel records and information
Preferred Certifications
CISSP or Associate of ISC2
CompTIA Security+
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Microsoft Certified: Security Operations Analyst Associate (SC-200)
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
GSEC, GIAC, CEH, SSCP, or equivalent security certification
Technology Exposure
Strong candidates should have hands-on experience with several of the following technology areas:
Security Platforms - SIEM, EDR/XDR, vulnerability management, threat intelligence, DLP, IDS/IPS, web/email filtering, endpoint protection
Microsoft Security - Microsoft Defender, Microsoft Sentinel, Microsoft 365 security, Entra ID, Azure security controls, Conditional Access, Identity Protection
Infrastructure - Windows Server, Linux/Unix, Active Directory, virtualization, storage, network security, firewall and access control concepts
Cloud and SaaS - Azure, Microsoft 365, cloud security posture, SaaS security reviews, cloud-hosted applications and services
Automation - PowerShell, Python, APIs, workflow automation, reporting automation, dashboard development, operational scripting
Frameworks and Methods - NIST, CIS Controls, MITRE ATT&CK, OWASP, CVSS, SOX controls, risk management, secure configuration standards
And here’s the fine print HR wants you to know:
Job is intermittently sedentary but requires mobility (i.e., climb stairs)
Will use some repetitive motion of hand-wrist in using computer and writing
Works in a typical office setting
Emotional stability and personal maturity are important attributes in this position
Must handle stressful, urgent, novel and diverse work situations on a daily basis
May require long hours and odd schedules (including weekends)
Position requires periodic travel by automobile to handle work-related activities
May require airline travel, out-of-town and /or overnight trips
Attendance and punctuality is essential for success in this position
Hazards can be minimized with proper lifting techniques, SDS, general safety training, and wearing appropriate PPE
Contact your HR team for the position’s Physical Demands Analysis
This job description is not an all-inclusive list of duties and responsibilities. Camden may add or change responsibilities in order to meet business and organizational needs. Employees must meet qualification standards that are job-related and consistent with business necessity and must be able to perform the essential functions of the position, with or without reasonable accommodations.
To learn more about our awesome Benefits, visit Camden Benefits.
Camden Property Trust Broomfield, Colorado, USA Office
Broomfield, United States
Camden Property Trust Denver, Colorado, USA Office
Denver, United States
Camden Property Trust Westminster, Colorado, USA Office
Westminster, United States
Similar Jobs
What you need to know about the Colorado Tech Scene
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
