Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage and enhance Microsoft Defender for Endpoint and Microsoft Sentinel (SIEM).

• Assess alerts, investigate potentially harmful activities, and engage in comprehensive incident response processes (including containment, eradication, and documentation).

• Conduct enterprise-level vulnerability assessments.

• Confirm secure configuration standards for servers, endpoints, and cloud resources, while coordinating remediation efforts among teams.

• Aid in the implementation and upkeep of identity controls, such as conditional access and device compliance policies.

• Collaborate with Infrastructure, Cloud, and End User Compute teams to enhance patching, hardening, and device security protocols.

• Contribute to the development of technical runbooks and incident response strategies.

• Supply technical documentation and evidence for regulatory audits and evaluations.

• Keep abreast of new threats, vulnerabilities, and advancements in security technologies.

⛳️ Requirements

• Over 5 years of experience in cybersecurity, security operations, or security engineering.

• Demonstrated expertise with Microsoft Defender for Endpoint (or comparable EDR solutions) and SIEM systems (e.g., Microsoft Sentinel, Splunk, QRadar).

• Strong knowledge of Azure or other leading cloud platforms, along with experience in scripting/automation (PowerShell, Python, or KQL).

• Proven history of conducting security investigations and managing incident response efforts.

• Bachelor’s degree or equivalent professional experience.

• At least one relevant certification (e.g., Security+, SC-200, CySA+) is strongly preferred.

🏝️ Benefits

• Opportunities for professional development.