Security Engineer

Position Summary

This role combines security monitoring, investigation, and incident response with the design, implementation, and continuous improvement of security controls. The individual will help secure corporate IT, Azure cloud, and commercial systems by operating security platforms, addressing vulnerabilities, and engineering solutions across identity, endpoints, networks, and remote access.

Want to make an application Make sure your CV is up to date, then read the following job specs carefully before applying.

Day-to-Day Responsibilities

• Perform security engineering, administration, and monitoring of security platforms and tools
• Manage and support tools including email security, DLP, EDR, firewalls, web/CASB proxies, PIM, PAM, MFA, and conditional access policy
• Triage security alerts from SIEM and other security platforms and investigate potential threats
• Lead vulnerability management activities, including identification, risk-based prioritization, remediation tracking, and coordination with responsible teams
• Provide technical and strategic support for IT projects, departmental goals, and the IT Security Roadmap
• Develop, maintain, and improve security technologies, processes, and governance to enhance proactive monitoring and detection capabilities
• Partner with the primary patching resource to support patching efforts

Must-Have Qualifications

• Strong vulnerability management experience
• SIEM experience
• Experience with Microsoft Purview
• Incident response experience
• Ability to work independently and be proactive
• Hands-on engineering experience implementing security tools, especially Microsoft security tools
• Solid understanding of infrastructure, xhqgsiq including systems and networking
• Experience working with or supporting patching efforts

Nice-to-Have Qualifications

• Basic IAM understanding

Additional Notes

• This person will work closely with the Security Architect but must be comfortable operating independently and proactively working in systems on a daily basis
• Client is looking for someone with both operational/security monitoring experience and engineering/implementation capability