Security Engineer

Overview As a Security Engineer, you’ll strengthen the security of IT infrastructure, networks, and cloud environments. You’ll assess risks, build practical safeguards, and help teams detect and respond to threats across systems and services. Your impact: By improving security controls and incident response, you help protect users, business operations, and sensitive information. Duties - Monitor, triage, and work security alerts and tickets, ensuring timely response and resolution in line with SLAs - Escalate high-priority or complex alerts to senior-level personnel - Document resolution steps, root cause, and remediation clearly for audit and knowledge-base purposes - Maintain healthy agent deployment, connectivity, and reporting for endpoint detection and response (EDR) and managed detection and response (MDR) platforms across client environments - Troubleshoot agent health issues, including offline agents, failed updates, misconfigurations, and tamper alerts - Coordinate with vendor support teams to resolve platform issues, open support cases, and track resolution - Assist with onboarding new clients and endpoints into security monitoring platforms - Review and act on alerts generated by EDR and MDR platforms - Monitor network security services, licensing status, and alerts for client firewalls - Triage potential incidents and escalate when necessary - Assist senior personnel with investigations, including evidence gathering, log review, and timeline reconstruction - Support containment activities such as isolating endpoints or disabling accounts, as directed - Help draft incident summaries and after-action reports - Participate in post-incident reviews to identify process improvements - Perform business email compromise (BEC) investigations for high-severity phishing tickets, including review of sign-in logs, inbox rules, mail forwarding, MFA changes, OAuth app consents, and message traces - Execute BEC containment steps as directed, such as revoking sessions, resetting credentials, removing malicious inbox rules, and purging malicious messages across mailboxes - Regularly review security posture scores (such as Microsoft Secure Score) across client cloud tenants and identify improvement opportunities - Implement approved configuration changes, such as conditional access, MFA enforcement, mail flow rules, and identity protection policies, to raise posture scores - Track progress and report on posture trends to leadership and clients - Help recommend and document security baseline standards across the client base - Administer the security awareness training platform, including enrolling users, assigning modules, and tracking completion - Manage and analyze phishing simulation campaigns, report on click rates, and follow up on repeat clickers - Assist in developing or curating training content and communications for end users - Generate training compliance reports for internal and client stakeholders - Track firmware versions on firewalls and networking equipment against vendor advisories, and flag devices not on a secure, stable, supported release - Assist with planning and scheduling firmware updates in coordination with the network team - Verify that configuration backups for network devices are current - Assist with reviewing firewall rules for over-permissive access or exposed management interfaces - Monitor backup job health across client environments and troubleshoot or escalate failed or missed jobs - Assist with periodic test restores to validate backup integrity and document results - Help verify that backup configurations meet retention and immutability or offsite standards - Monitor and support patch compliance across endpoints and servers, flagging systems that fall out of compliance - Assist with vulnerability scanning, reviewing results, and tracking remediation to closure - Support identity and access management tasks such as access reviews, MFA enrollment assistance, and offboarding security checks - Assist with compliance and audit support, such as evidence gathering for frameworks like NIST, CIS, SOC 2, HIPAA, or cyber insurance questionnaires - Participate in an on-call or after-hours escalation rotation as needed - Review firewall, email security, and endpoint logs for anomalies - Support the creation of client-facing security reports and quarterly business review content - Stay current on emerging threats, vulnerabilities, and industry best practices - Perform other security-related duties as assigned Qualifications/Experience - 1- 2 years of experience in security engineering, cybersecurity, network engineering, system administration, or related IT work; computer science or equivalent practical knowledge is relevant. - Basic understanding of networking concepts (TCP/IP, DNS, firewalls) and endpoint security concepts - Familiarity with Microsoft 365 or comparable cloud productivity ecosystems, including identity, email, and endpoint management - Strong attention to detail and ability to follow documented processes - Strong written communication skills for ticket documentation and reporting - Ability to work both independently and collaboratively, escalating appropriately when unsure - Industry certification such as CompTIA Security+ or Network+, or actively pursuing one - Prior exposure to EDR or MDR platforms - Prior exposure to SIEM or PSA/ticketing platforms - Experience in a managed service provider (MSP/MSSP) or multi-client environment Benefits: - 401(k) - 401(k) matching - Dental insurance - Flexible spending account - Health insurance - Life insurance - Paid time off - Parental leave - Professional development assistance - Referral program - Vision insurance Work Location: In person