Senior IT Security Engineer

SCHEDULE

DUTIES AND RESPONSIBILITIES

IT Infrastructure Design, Security, and Management:

Support and automate the organization’s internal IT stack to meet business scaling requirements.
Configure and maintain cloud-based technologies to enhance infrastructure efficiency and security.
Design, implement, and manage IT infrastructure components, including Secure Web Gateways (SWG), Cloud Access Security Brokers (CASB), and Security Service Edge (SSE)/Secure Access Service Edge (SASE) solutions.
Deploy and manage modern workspace solutions, including Microsoft 365, Intune, and Azure AD, ensuring robust cloud identity directory services.

Threat Monitoring and Incident Response:

Monitor network traffic, system logs, email security platforms, and Endpoint Detection and Response (EDR) tools for security threats.
Investigate and resolve security incidents, including ransomware, phishing, malware, and Advanced Persistent Threats (APTs).
Execute incident response processes to contain threats, minimize impact, and document lessons learned.
Analyze security alerts from antivirus (AV) and EDR platforms to ensure prompt resolution and
mitigation.

Vulnerability and Patch Management:

Conduct regular vulnerability assessments to identify and remediate security risks in IT systems and applications.
Oversee the deployment of patches and security updates, ensuring minimal disruption to operations.

Policy and Compliance:

Assist in implementing IT security policies and procedures in alignment with industry frameworks such as NIST, CIS, and ISO 27002.
Contribute to security awareness initiatives to educate users about best practices and risk mitigation.

Automation and Optimization:

Automate repetitive tasks using scripting tools like PowerShell and Python to improve efficiency.
Utilize automation platforms such as Power Automate, Zapier, and Make to streamline workflows.

Collaboration and Technical Support:

Collaborate with team leaders and IT staff to integrate security best practices into existing and new systems.
Provide technical support and recommendations for security enhancements and improvements.

Minimum Education/Experience

Education and Experience:

3-7 years of hands-on IT Infrastructure, security operations and security engineering experience.
Relevant degree preferred, not required.

Certifications:

Preferred certifications include CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft certifications (e.g., SC-100, SC-300), and ITIL.

Technical Skills:

Expertise in Microsoft 365, Intune, and Exchange for managing and securing IT environments.
Hands-on experience automating tasks using scripting tools like PowerShell and Python, and platforms like Power Automate, Zapier, and Make.
Proficiency in security technologies such as SIEM, EDR, DLP, SWG, CASB, and SSE/SASE.
Extensive experience in vulnerability remediation and patch management, ensuring timely resolution of security gaps.
Familiarity with security frameworks like OWASP and standards such as NIST, CIS, and ISO 27002.

Soft Skills:

Strong analytical and problem-solving abilities with a focus on technical execution.
Effective communication skills for collaborating with team members and explaining technical solutions.
Ability to work independently and take ownership of technical projects and tasks