Security Engineer

Job Summary: The Security Engineer is responsible for identifying, analyzing, and mitigating security threats while ensuring the organization’s cyber defenses remain strong. This role focuses on implementing advanced security measures, monitoring network activity, and responding to cyber incidents in a timely and effective manner. The Engineer will work closely with IT and security teams to enhance the organization’s overall security posture and protect critical data from potential breaches., * Design, implement, and maintain security solutions to protect IT infrastructure and sensitive data.

• Manage and maintain Security Operations Center functions, including the monitoring and analysis of security events, alerts, and incidents.
• Conduct risk assessments, Lead and coordinate incident response activities, including investigation, containment, and remediation.
• Develop and enforce security policies, procedures, and best practices.
• Conduct vulnerability assessments and penetration testing to identify security gaps.
• Configure, deploy, and manage EDR/XDR solutions to detect and respond to threats on endpoints across the organization.
• Investigate and analyze security breaches to determine root causes and implement corrective actions.
• Collaborate with IT teams to ensure secure configuration of networks, servers, and endpoints.
• Provide recommendations and deploy security tools such as firewalls, intrusion detection systems (IDS), and endpoint protection.
• Stay updated on emerging cybersecurity threats, industry best practices, and regulatory compliance requirements.
• Oversee security configurations for Office 365, ensuring best practices are followed in access controls, monitoring, and incident detection in cloud services.
• Train staff on cybersecurity awareness and promote security best practices across the organization.
• Document security incidents, response actions, and resolution processes for continuous improvement.

• Strong understanding of cybersecurity principles, frameworks, and methodologies.
• Proficiency in security technologies, including SIEM, firewalls, antivirus, and endpoint security solutions.
• Experience with security incident detection, analysis, and response.
• Knowledge of network protocols, cloud security, and encryption methods.
• Ability to assess security risks and develop mitigation strategies.
• Proficiency in scripting or programming languages (Python, PowerShell, etc.) is a plus.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication and collaboration skills to work with cross-functional teams.
• Familiarity with regulatory compliance requirements (e.g., NIST, ISO 27001, GDPR).

Required Education, Certifications/ Licenses, Related Experience

• Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience).
• Industry certifications such as CISSP, CISM, CEH, GCIH or Security+ preferred.
• Minimum of 3-5 years of experience in cybersecurity, network security, SOC Analyst or a related field.
• In lieu of degree, a total number of 10 years of experience in related fields (in addition to the management experience required) will meet the education and related experience requirements listed above., * Ability to work in an office environment with prolonged periods of sitting at a desk.
• May require lifting of equipment (up to 25 lbs) as needed.
• Ability to respond to security incidents outside of normal working hours as necessary.