Cyber Security Engineer

This is an onsite position:

Key Responsibilities

• Monitor enterprise environments for security threats, vulnerabilities, suspicious activity, and compliance risks using SIEM, endpoint protection, and monitoring tools.
• Perform incident detection, triage, escalation, investigation, and remediation of cybersecurity alerts and security events.
• Conduct infrastructure hardening across servers, endpoints, cloud environments, networking equipment, and identity systems to reduce attack surfaces.
• Develop, draft, and maintain cybersecurity policies, standards, procedures, and best practices aligned with business and compliance requirements.
• Implement and enforce security controls and cybersecurity best practices across systems, networks, applications, and endpoints.
• Support and secure both Windows and macOS environments, including endpoint protection, patch management, device compliance, and access controls.
• Partner with IT teams to implement secure configurations, access management, MFA, endpoint security, and zero-trust principles.
• Conduct vulnerability assessments and remediation efforts, ensuring identified risks are prioritized and mitigated.
• Assist with security audits, risk assessments, penetration testing remediation, and compliance initiatives.
• Monitor and manage firewalls, antivirus/EDR tools, SIEM platforms, email security, identity management, and endpoint detection systems.
• Develop and maintain incident response playbooks, security documentation, and escalation procedures.
• Support patching and vulnerability remediation efforts for servers, workstations, mobile devices, and cloud systems.
• Provide security awareness support and guidance to internal teams on cyber hygiene and security best practices.
• Stay informed on emerging threats, vulnerabilities, and cybersecurity trends to proactively strengthen defenses.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
• 3+ years of experience in Cybersecurity Engineering, Security Operations, Systems Administration, or Infrastructure Security.
• Hands-on experience with security monitoring, alert triage, incident response, and vulnerability management.
• Experience securing and supporting Windows and macOS environments in an enterprise setting.
• Strong understanding of endpoint security, access management, MFA, patching, and hardening standards.
• Experience with network security principles, firewalls, DNS, VPNs, TCP/IP, and secure authentication methods.
• Knowledge of cybersecurity frameworks such as NIST, CIS Controls, ISO 27001, or Zero Trust Architecture.
• Experience implementing and maintaining security policies and operational procedures.
• Strong troubleshooting, analytical, and communication skills.

Preferred Technical Environment

• SIEM/Monitoring: Splunk, Microsoft Sentinel, QRadar, LogRhythm
• Endpoint Security: CrowdStrike, Microsoft Defender, SentinelOne, Carbon Black
• Identity & Access: Active Directory, Entra ID (Azure AD), Okta, MFA solutions
• Endpoint Management: Intune, Jamf, SCCM/MECM, Kandji
• Networking & Security: Cisco, Palo Alto, Fortinet, Meraki, VPNs, IDS/IPS
• Cloud Security: Azure, AWS, Microsoft 365 Security, Conditional Access
• Operating Systems: Windows Server, Windows 10/11, macOS

Preferred Certifications

• CompTIA Security+, CySA+, or CASP+
• CISSP, GIAC, CEH, or Microsoft Security Certifications preferred