Incident Response & Security Engineering

• Lead security incident response activities including containment, eradication, recovery, and lessons learned.
• Develop and maintain incident response procedures and playbooks.
• Perform root cause analysis and coordinate post-incident reviews.
• Support forensic investigations and evidence collection.
• Partner with internal and external stakeholders during security events.
• Improve detection, response, and recovery capabilities across the organization.

Infrastructure & Platform Security

• Secure and harden Windows Server, Linux, virtualization platforms, databases, storage systems, and enterprise applications.
• Review and maintain firewall configurations, VPNs, remote access solutions, and network security controls.
• Support network segmentation and Zero Trust initiatives.
• Implement security baselines aligned with CIS Benchmarks and industry best practices.
• Participate in infrastructure architecture reviews and technology evaluations.
• Validate backup, disaster recovery, and ransomware recovery readiness.

Cloud Security

• Administer and secure Microsoft Azure and Microsoft 365 environments.
• Implement cloud security controls, monitoring, and governance standards.
• Review cloud architecture for security and compliance requirements.
• Manage security configurations for cloud-hosted SaaS infrastructure.
• Support continuous monitoring and cloud security posture management initiatives.

Identity & Access Management

• Administer and secure Active Directory and Microsoft Entra ID.
• Implement least-privilege access controls and role-based access management.
• Manage privileged access, service accounts, and identity governance processes.
• Conduct periodic access reviews and entitlement audits.
• Support MFA, Conditional Access, and identity security initiatives.

Compliance & Governance

• Support and lead security initiatives aligned with NIST, FedRAMP, CMMC, FISMA, and other applicable frameworks.
• Develop and maintain policies, standards, procedures, SSPs, POA&Ms, and security documentation.
• Coordinate technical evidence collection for auditys and assessments.
• Participate in risk assessments and security reviews.
• Drive continuous monitoring and compliance activities.
• Serve as the primary technical security resource during audits and customer security reviews.

Customer & Vendor Security

• Support customer security questionnaires, audits, and due diligence reviews.
• Participate in customer-facing security discussions as needed.
• Perform security reviews of third-party vendors, suppliers, and service providers.
• Assist with security-related contractual and compliance requirements.

Automation & Continuous Improvement

• Develop scripts and automation to improve security operations and reporting.
• Support integration of security controls into CI/CD and operational workflows.
• Evaluate new technologies and recommend security improvements.
• Promote secure engineering and operational best practices across the organization.

Qualifications

Qualifications and Education Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent
• experience.
• 5+ years of experience in Security Engineering, Infrastructure Security, Cybersecurity Operations, or a related
• Experience administering SIEM, EDR, and vulnerability management platforms.
• Experience leading or participating in incident response investigations.
• Strong understanding of networking, firewalls, VPNs, and security architecture.
• Experience securing Windows Server, Linux, Active Directory, Microsoft Entra ID, and virtualized environments.
• Experience managing cloud environments, preferably Microsoft Azure.
• Strong understanding of vulnerability management and risk mitigation practices.
• Experience with NIST Cybersecurity Framework and related security controls.
• Experience with PowerShell, Python, Bash, or other scripting languages.
• Strong written, verbal, and executive communication skills.

Nice to Have

• Experience supporting FedRAMP, CMMC, FISMA, SOC 2, or similar compliance frameworks.
• Experience with Microsoft Sentinel, Microsoft Defender, CrowdStrike, Splunk, Tenable, Nessus, Qualys, or equivalent platforms.
• Experience implementing CIS Benchmarks or DISA
• Experience supporting SaaS environments and cloud-hosted
• Experience with Infrastructure-as-Code solutions such as Terraform or
• Professional certifications such as CISSP, Security+, GSEC, GCIA, Azure Security Engineer, or equivalent.

Pay range: $145,000-$165,000

#IND-SOAC-TUS