Tier 3 MSP Engineer

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Analyze phishing attacks, unusual login activities, and instances of account compromise.

• Execute threat hunting, log analysis, containment measures, and remediation efforts.

• Spearhead response initiatives for security events related to Microsoft 365 and Azure.

• Partner with security associates and vendors during ongoing incidents.

• Conduct reviews post-incident and enhance prevention strategies.

• Design and refine Conditional Access policies along with identity security controls.

• Oversee and optimize security features of Microsoft Defender and Entra ID.

• Provide support and troubleshooting for Azure infrastructure and Azure Virtual Desktop environments.

• Manage intricate escalations related to networking, virtualization, storage, and authentication.

• Assist in automation and infrastructure-as-code projects.

• Mentor junior engineers and contribute to the establishment of technical standards.

⛳️ Requirements

• Over 5 years of progressive IT experience, with a minimum of 2 years concentrated on security operations.

• Proficient experience with the Microsoft 365 security suite: Defender for Office 365, Defender for Endpoint, Defender for Identity, Entra ID Protection, and Conditional Access on a large scale.

• Strong foundational knowledge of Azure — including Entra ID, AVD, networking (VNets, NSGs, Private Endpoints), RBAC, and at least a basic understanding of Infrastructure as Code (Bicep or Terraform).

• Experience in incident response — having managed a genuine BEC, ransomware incident, or account takeover from start to finish.

• Functional scripting capabilities in PowerShell.

• Exceptional written communication skills.

🏝️ Benefits

• Health insurance.

• 401K with a 3% match.

• 12 days of PTO to start (with accrual increases based on tenure) plus 8 paid holidays.

• Annual performance bonus linked to security KPIs.

• Home office stipend.