Security Engineer

Position Summary NOVVA Data Centers is seeking a highly skilled Senior Security Engineer to lead the design, implementation, and operation of cybersecurity technologies that protect our enterprise, customer-facing systems, and mission-critical data center environments. This position serves as the technical cybersecurity lead and works closely with IT, Networking, Data Center Operations, Physical Security, Compliance, and leadership to define scope and prioritization. The ideal candidate combines strong engineering expertise with operational security experience and thrives in a fast-paced, highly available infrastructure environment.

Primary Responsibilities Security Engineering

Design, implement, and maintain enterprise security technologies Lead deployment and management of:

Microsoft Defender XDR Microsoft Entra ID security Privileged Identity Management (PIM) Conditional Access Defender for Cloud Defender for Endpoint Email Security Vulnerability Management platforms

Engineer secure cloud and hybrid infrastructure across Microsoft 365 and AWS Develop security standards and hardening baselines

Security Operations

Lead incident response activities Investigate security alerts and indicators of compromise Perform threat hunting activities Conduct forensic investigations when required Coordinate response to cybersecurity incidents

Risk & Compliance Support and maintain compliance with:

HITRUST SOC 2 ISO 27001 PCI DSS HIPAA Internal security audits

Develop security documentation including:

Policies Standards Procedures Technical runbooks

Vulnerability Management

Manage enterprise vulnerability scanning Prioritize remediation activities Coordinate patch management with infrastructure teams Track remediation metrics

Identity & Access Management

Manage privileged access Review permissions and access controls Implement Zero Trust principles Support identity lifecycle processes

Security Architecture

Participate in infrastructure design reviews Evaluate new technologies Perform security risk assessments Recommend security improvements

Leadership

Mentor junior security staff Provide technical guidance Evangelize strong security practices Participate in after-hours incident response Support cybersecurity roadmap initiatives

Bachelors degree in Information Technology, Cybersecurity, or related field (or equivalent experience) 7+ years of cybersecurity experience 5+ years of security engineering experience Experience administering Microsoft security technologies Experience with SIEM, EDR, IAM, and vulnerability management platforms Strong understanding of:

Networking Active Directory Microsoft 365 Windows Server Linux Firewalls DNS VPN Zero Trust Architecture

Preferred Qualifications One or more of:

CISSP GIAC certifications GSEC GCIA GCIH Azure Security Engineer Microsoft Security certifications

Experience with:

ServiceNow PowerShell Python Infrastructure as Code SIEM/SOAR platforms Vulnerability & Patch management Operational Technologies Data center operations

Core Competencies

Security Architecture Incident Response Threat Detection Security Engineering Risk Management Communication Project Leadership Continuous Improvement, Access Control, Amazon Web Services (AWS), Cloud Computing, Computer Security, Continuous Improvement, Customer Relations, DNS (Domain Name System), Email Security, Employee Orientation, Endpoint Security, Engineering, Enterprise Protection, Establish Priorities, Firewalls, HIPAA (Health Insurance Portability and Accountability Act), High Availability, Hunting, Hybrid Cloud, ISO (International Organization for Standardization), Identity Data Management, Incident Response, Information Technology & Information Systems, Insurance, Internal Audit, Internet Security, Leadership, Linux Operating System, Maintain Compliance, Mentoring, Metrics, Microsoft Access Database, Microsoft Active Directory, Microsoft Infrastructure, Microsoft Product Family, Microsoft Windows Server, Network Operations Center, Operations Security (OPSEC), PCI-DSS, Physical Security, Protocol Independent Multicast (PIM), Python Programming/Scripting Language, Risk, Risk Analysis, Risk Management, Security Analysis, Security Architecture, Security Auditing, Security Information and Event Management (SIEM), Security Infrastructure, ServiceNow, Software Engineering, Software Patches, Standards Development, Technical Leadership, VPN (Virtual Private Network), Vulnerability Scanners, Windows PowerShell

Comprehensive health, dental, and vision insurance 401k with company match PTO