IT Security Lead

Overview:We’re looking for a hands-on IT Security Lead to help operate and strengthen an internal security program within a regulated environment. This role covers security operations, identity and access management, endpoint and network security, vulnerability management, compliance, and incident response.This is a great opportunity for someone with broad cybersecurity experience who can work independently, collaborate across teams, and grow into a senior security role.What You’ll Do:Own day-to-day cybersecurity operations and respond to SIEM/EDR alerts and security incidents.Manage Active Directory, Microsoft Entra ID, SSO, MFA, privileged access, and access reviews.Support endpoint security, patching, encryption, secure configurations, and vulnerability remediation.Support firewalls, VPNs, network segmentation, wireless security, and network monitoring.Run vulnerability scans and coordinate remediation with IT and system owners.Support incident response, ransomware recovery, disaster recovery, and business continuity.Help maintain compliance with CMMC, DFARS, NIST, ITAR/export controls, and ISO 27001.Protect CUI and FCI environments and maintain required documentation and audit evidence.Support customer/security audits and vendor security reviews.Manage security awareness training and phishing simulations.Evaluate and implement new security technologies and processes.Required Qualifications:3+ years of hands-on IT security/cybersecurity experience across multiple security areas.Strong experience with SIEM, EDR, vulnerability management, endpoint security, and incident response.Strong Microsoft experience, including Windows, Active Directory, Microsoft 365, Entra ID, MFA, and SSO.Strong networking/security fundamentals, including firewalls, VPNs, segmentation, authentication, and secure configurations.Practical experience with CMMC and CUI/FCI, ideally with exposure to DFARS, NIST, or ITAR/export-controlled environments.