Cybersecurity Engineer

The Cybersecurity Engineer safeguards Phoenix Investors' digital assets, systems, and data from cyber threats, helping ensure the confidentiality, integrity, and availability of company and investor information. This is a hands-on engineering role that operates and improves controls across the environment-security monitoring and threat defense, identity and Microsoft 365 security, data protection, and compliance-and is comfortable executing both short-term incidents and longer-term security projects. Working under the technical direction of the Senior Network and Security Administrator, the engineer contributes directly to every layer of the company's security program.

Protecting data in an AI-forward business is a core part of the mission, but it sits alongside a broader, well-rounded security mandate. This is a pragmatic role on a lean team: the engineer takes day-to-day direction now and grows deeper ownership over time, and every recommendation is expected to be business-minded and budget-conscious.

Core Focus Areas

Security Operations, Monitoring, & Threat Defense

• Monitor security logs and alerts across SIEM and Microsoft Defender (XDR); investigate, triage, and respond to potential incidents.
• Operate and help tune endpoint/EDR coverage (Microsoft Defender, CrowdStrike) and assist with firewall, IDS/IPS, and edge controls (Fortinet) under senior direction.
• Run vulnerability scanning, patch/remediation tracking, and alert tuning to reduce false positives while preserving detection coverage.

Identity & Microsoft 365 Security

• Help administer Microsoft Entra identity and access-conditional access, MFA, identity protection, and least-privilege roles-applying Zero Trust principles.
• Maintain Microsoft 365 security and compliance configuration across Exchange Online, SharePoint/OneDrive, and Teams, keeping settings hardened and consistent.

Data Protection & AI Governance

• Build, deploy, and tune DLP, sensitivity labeling, encryption, and insider-risk controls in Microsoft Purview across email, endpoints, and cloud.
• Prevent data loss through unsanctioned "Shadow AI," enabling approved AI services (e.g., Microsoft 365 Copilot) to be used safely and productively.

Compliance, Risk & Audit (Supporting)

• Help maintain compliance with relevant frameworks and regulations (e.g., ISO 27001, NIST, SOC 2, GDPR, where applicable).
• Perform risk and control-maturity assessments, track remediation, and support third-party/partner risk reviews; provide audit-ready evidence.

Incident Response & Business Continuity (Supporting)

• Support investigation, containment, and recovery during security incidents under the direction of the senior owner.
• Help maintain incident response runbooks and tabletop exercises; contribute to business continuity/disaster recovery readiness.

Do you have experience in Tooling?, Do you have a Bachelor's degree?, We are seeking a driven Cybersecurity Engineer who excels at collaborating across IT, legal, compliance, and external partners to protect and strengthen our security posture. This role requires a results-oriented professional who thrives under pressure, can navigate complex and evolving challenges, and takes initiative through continuous learning and innovation., * Bachelor's degree in information security, IT, or computer science, or equivalent experience; 3 - 5+ years in cybersecurity roles.

• Hands-on experience with security tooling such as SIEM, endpoint/EDR, IDS/IPS, and firewalls, DLP, antivirus, and vulnerability scanners.
• Working knowledge of the Microsoft security stack (Defender XDR, Purview) and Microsoft Entra/Microsoft 365 administration and security.
• Experience supporting incident response and compliance with frameworks such as ISO 27001, NIST, or SOC 2.
• Strong problem-solving and communication skills; comfortable taking technical direction while owning execution and quality.
• A practical, business-minded approach that balances risk reduction against cost and operational impact., * Certifications such as Security+, Microsoft SC-200/SC-400/SC-300, or CISSP/CISA/CISM.
• Experience securing or governing generative AI tools (e.g., Microsoft 365 Copilot) and detecting shadow AI.
• Familiarity with Microsoft Purview Insider Risk Management and Zero Trust implementation.
• Prior consulting, MSP, or vendor-side experience delivering Microsoft security and identity projects.
• Exposure to financial services or real estate investment environments and their regulatory expectations.

Pulled from the full job description

• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance
• Free parking, Phoenix offers comprehensive benefits, company-paid parking, and daily breakfast and lunch prepared by our on-site chefs, all designed to make your workday easier and more enjoyable.
• 401(k) with employer match
• Medical, dental, and vision insurance
• Paid time off (PTO) and holidays
• Company-paid parking
• Company-paid breakfast and lunch

All salary estimates are provided by Indeed, not Phoenix. Phoenix is committed to offering a competitive salary based on experience., * 401(k)

• 401(k) matching
• Dental insurance
• Paid time off
• Vision insurance

Phoenix Investors is a national commercial real estate firm headquartered in Milwaukee, WI, focused on revitalizing industrial and manufacturing properties across the United States and positively impacting the communities we serve.