Security Engineer

Position SummaryThe Security Engineer is responsible for establishing, monitoring, and improving the organization’s information security posture. This role will work closely with IT infrastructure teams to secure systems, respond to security incidents, and implement best practices across cloud and on-prem environments. Issue tickets received from the ticketing system will be escalated by the Support Engineer if the issue is related to the skillset and there is no repeatable resolution. Security OperationsMonitor and respond to security alerts across Microsoft 365, and other relevant IT platformsInvestigate suspicious activity and coordinate incident responseTrack and document security events and remediation actionsConsistently seek to improve the hardening of the organizations security postureIdentity & Access ManagementMaintain and enhance identity provider security controls (M365 Security)Conduct periodic access reviews and privilege auditAssist with secure onboarding/offboarding processesEndpoint & Email SecurityManage Microsoft Defender (Endpoint, Office 365, Identity)Maintain email security platforms Enforce endpoint compliance and hardening standardsVulnerability ManagementIdentify, track, and remediate vulnerabilities across systems Work with IT team members to ensure timely patching and updates (coordination for server/endpoint and network patches with appropriate SME)Perform periodic security assessmentsGovernance & ComplianceAssist in the development of security policies and proceduresSupport compliance initiatives (PCI, audits, etc.)Promote security awareness and best practices across the organizationCoordinating user awareness trainingDocumenting processes for standard procedures and implementing standardizationRequired Skills & ExperienceExperience and knowledge of Microsoft 365 ecosystem security offeringsUnderstanding of identity security providers and how to prevent unauthorized entryKnowledge of endpoint security principlesFamiliarity with networking and firewall security conceptsExperience with email security platforms Experience with SIEM, vulnerability scans, and incident response management. Preferred QualificationsSecurity certifications (Security+, AZ-500)3-5 years of professional experience managing security-related solutions.  Knowledge of compliance frameworks (PCI-DSS, NIST, CIS)