Cybersecurity Operations Engineer

About the job

Client: Leading Engineering, Architecture & Construction Consulting Firm

Position: Security Operations Engineer

Employment Type: Direct Hire

Salary: $125,000 – $150,000 annually

Work Authorization: Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J-1, OPT, or CPT.

Our client is seeking a Security Operations Engineer to strengthen enterprise cybersecurity, privacy, and operational resilience across a geographically distributed organization. This role focuses on securing cloud environments, endpoints, identity systems, SaaS platforms, and enterprise infrastructure while overseeing security operations, vulnerability management, incident response, and compliance initiatives.

The ideal candidate brings a combination of hands-on security engineering, IT operations, risk management, and security testing experience. This individual will collaborate with internal IT teams, business stakeholders, and Managed Security Services Providers (MSSPs) to implement security controls, address vulnerabilities, and continuously improve the organization's overall security posture.

Key Highlights:

• Serve as the primary technical liaison to Managed Security Services Providers (MSSPs), overseeing security operations, vulnerability assessments, incident response, and remediation activities.
• Implement and maintain enterprise security controls across Microsoft 365, Azure Entra ID, Intune, SaaS applications, cloud environments, and endpoint systems.
• Manage identity and access security, including SSO, MFA, privileged access management, user provisioning, and least-privilege access controls.
• Conduct authorized vulnerability assessments, penetration testing, attack-path analysis, and security risk assessments to identify and remediate threats.
• Support security monitoring, incident investigations, threat analysis, containment, recovery, and continuous security improvements.
• Maintain security risk registers, policies, operational procedures, incident response documentation, and audit evidence.
• Partner with IT, Legal, Privacy, and Compliance teams to support regulatory requirements, security audits, and ISO/NIST-aligned security frameworks.
• Automate security and operational workflows using Python, PowerShell, Power Automate, or comparable technologies.
• Support endpoint protection, patch management, asset inventories, secure configurations, and third-party vendor security assessments.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered.
• Minimum of 3 years of experience in cybersecurity, security engineering, IT operations, infrastructure security, or a related discipline.
• Hands-on experience supporting enterprise endpoints, cloud environments, SaaS applications, and identity management systems.
• Strong experience with Microsoft 365, Azure Entra ID, Intune, or comparable enterprise security and endpoint management platforms.
• Working knowledge of vulnerability management, penetration testing, incident response, network security monitoring, and digital forensics.
• Understanding of SSO, SAML, MFA, privileged access management, and identity lifecycle management.
• Familiarity with firewalls, intrusion detection/prevention systems, EDR solutions, SIEM platforms, and common cybersecurity threats.
• Experience scripting and automating operational processes using Python, PowerShell, or similar technologies.
• Experience supporting security audits, compliance assessments, evidence collection, and technical documentation.
• Working knowledge of GDPR and familiarity with German and Swiss privacy regulations.
• Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.

Preferred Qualifications:

• Security certifications such as CompTIA Security+, Cloud+, OSCP, PNPT, GPEN, CEH, or equivalent credentials.
• Experience conducting penetration tests, red-team exercises, or adversary simulations.
• Experience with Microsoft Defender, SIEM, EDR, vulnerability scanning tools, and cloud security platforms.
• Familiarity with ISO 27001, ISO 27701, ISO 42001, and the NIST Cybersecurity Framework.
• Experience with third-party risk assessments, vendor security reviews, or international privacy compliance.
• Experience using Jira Service Management, Confluence, SharePoint, Power BI, or related enterprise platforms.

EEO Policy:

Allied Resources complies with all Equal Employment Opportunity (EEO) affirmative action laws and regulations. Allied Resources does not discriminate on the basis of age, race, religion, color, sex, national origin, marital status, genetic information, sexual orientation, gender identity and expression, disability, veteran status or other status protected by law.