Security Engineer

Role: Security Engineer

Design, implement, and continuously improve enterprise security controls to protect critical systems, data, and infrastructure. Partner with IT, engineering, and business stakeholders to identify risks, remediate vulnerabilities, enhance monitoring, and ensure compliance.

Responsibilities

• Own security controls using Microsoft security and compliance technologies
• Administer and optimize Microsoft Defender, Microsoft Purview, Microsoft Sentinel, and related platforms
• Implement data protection & compliance, including data loss prevention and information protection controls
• Perform vulnerability assessments, security reviews, and risk analyses and drive remediation
• Improve security monitoring and SIEM capabilities for detection, response, and visibility
• Develop and tune security alerts/analytics/detection content to reduce false positives
• Lead security incident investigations, including root cause analysis, containment, and remediation recommendations
• Collaborate with infrastructure, cloud, and application teams to integrate security best practices
• Support business continuity, disaster recovery, and incident response planning
• Maintain security documentation such as security plans, risk assessments, control documentation, and remediation plans
• Analyze emerging threats and security trends to continually strengthen posture
• Create security metrics, reporting, and executive dashboards
• Promote a security-first culture and advocate best practices

Required Qualifications

• Bachelor’s degree in Information Security/Cybersecurity/IT/CS or equivalent experience
• 5+ years hands-on cybersecurity experience (security engineering, vulnerability management, security operations)
• Deep experience with Microsoft 365 Security & Compliance (Defender, Purview, Sentinel)
• Strong knowledge of SIEM, security monitoring, logging, endpoint protection, and threat detection
• Experience implementing enterprise security controls and improvement initiatives
• Proven ability to investigate incidents, perform root cause analysis, and drive remediation
• Strong communication and stakeholder management skills

Remote/Work Model

• Primarily remote, with occasional in-person collaboration as needed