Security Engineer

Security Engineer

The Security Engineer is responsible for owning and building our client's security function across a hybrid cloud and on-premises environment. This role partners closely with Infrastructure and Systems Operations, Networking, Desktop Support, Development, and business teams to manage vulnerabilities, investigate and respond to security alerts, strengthen identity and access controls, and put the right security practices in place to support the company’s continued growth.

The ideal candidate is a hands-on security professional who can step in on day one and take ownership of the function with minimal direction. They bring strong experience in vulnerability management, incident response, Microsoft 365 and Entra ID, and cloud security, along with a track record of building processes and programs from the ground up rather than inheriting them.

Candidates will have the opportunity to work remotely or in a hybrid environment, with a preference for candidates located near facilities in Ohio or New Jersey. Occasional travel, roughly once per quarter, is expected.

Key Responsibilities

Vulnerability Management and Security Operations

• Manage the organization’s vulnerability management program using platforms such as Qualys VMDR to identify security weaknesses, evaluate risk, prioritize remediation, collaborate with technical teams, and verify corrective actions.

• Monitor and investigate security alerts across CrowdStrike Falcon, Stellar Cyber, AWS GuardDuty, Microsoft 365, and Entra ID, coordinating threat containment and remediation with relevant teams as needed.

• Direct incident response activities, including evidence collection and preservation, root cause investigations, corrective action planning, and comprehensive incident reporting.

• Coordinate internal and external vulnerability assessments, penetration tests, and remediation efforts across infrastructure, applications, and cloud environments.

Identity, Access, and Cloud Security

• Oversee identity and access management across Entra ID, Microsoft 365, AWS, and third-party applications, ensuring effective implementation of single sign-on (SSO), multi-factor authentication (MFA), conditional access, privileged access controls, and regular access reviews.

• Enforce least-privilege access and segregation of duties to reduce unauthorized access and strengthen identity governance.

• Evaluate and enhance security across a multi-account AWS Control Tower environment, covering IAM, EC2, EKS, RDS, S3, CloudTrail, network configurations, and encryption controls.

• Strengthen endpoint, email, and network security through phishing investigations, firewall assessments, network segmentation, secure remote access, and employee security awareness initiatives.

Application and Infrastructure Security

• Work closely with Development and DevOps teams to identify and mitigate application, API, CI/CD pipeline, and secrets management risks across GitHub, TeamCity, Argo CD, Kubernetes, and AWS Secrets Manager.

• Promote secure development practices and integrate security controls into application development, deployment, and infrastructure management processes.

• Evaluate technical security risks and recommend practical improvements to strengthen the organization’s overall security posture.

Compliance, Governance, and Risk Management

• Support compliance initiatives related to PCI DSS, SOC 2, customer security assessments, cyber insurance requirements, and third-party vendor risk evaluations.

• Maintain security policies, procedures, audit evidence, control documentation, and supporting records required for compliance and external assessments.

• Develop and maintain security standards, operational procedures, incident response playbooks, performance metrics, and security best practices.

• Establish guidelines for the responsible and secure use of AI tools within the organization.

• Communicate security risks, remediation priorities, program progress, and recommended improvements to technical stakeholders and IT leadership.

Qualifications and Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related discipline; equivalent professional experience will also be considered.

• At least 4 years of practical experience in information security, cloud security, network security, or security engineering, with additional relevant experience preferred.

• Demonstrated experience developing or managing a vulnerability management program, including risk-based prioritization, remediation coordination, tracking, and penetration testing follow-up.

• Hands-on experience analyzing security alerts and managing incident response using XDR, EDR, or SIEM solutions such as CrowdStrike Falcon, Stellar Cyber, Microsoft Defender, or comparable platforms.

• Strong understanding of Microsoft 365, Entra ID, Active Directory, MFA, SSO, and identity and access governance principles.

• Practical experience securing cloud environments, preferably AWS, including identity and access management, security logging, and multi-account architectures.

• Working knowledge of Windows and Linux security, network architecture, firewalls, DNS, TLS, and common authentication protocols.

• Familiarity with compliance and security frameworks, particularly PCI DSS and SOC 2, is preferred.

• Exposure to Kubernetes, Terraform, CI/CD security practices, and Adobe Commerce or Magento environments is an advantage.

• Industry-recognized security certifications such as Security+, CySA+, SSCP, CISSP, CCSP, or AWS Certified Security – Specialty are desirable. Relevant hands-on experience will be given greater consideration than certifications alone.

• PMP or other project management credentials are an added advantage.

• Strong organizational, analytical, and problem-solving skills, with the ability to work independently and establish security processes in a growing organization.

• Excellent communication and collaboration skills, with the ability to explain technical risks and security recommendations effectively to both technical teams and business stakeholders.