Security Engineer
Pcs Inc.
Louisville, TN, United States
13 days ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on www.indeed.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Starter
Experience required
1 year minimum
Compensation
$47,840.0 - $56,160.0
Working hours
Regular working hours
Job source
Tech stack
Microsoft Windows
CompTIA Security+
Cyber Security
Computer Networks
Domain Name System (DNS)
Firmware
Identity and Access Management
Networking Hardware
Network Monitoring
OAuth
Anti-Phishing
Security Information and Event Management
+6 more
TCP/IP
Cloud Platform System
Firewalls (Computer Science)
Information Technology
Firewall Services Module
Vulnerability Analysis
Job description
- Monitor, triage, and work security alerts and tickets, ensuring timely response and resolution in line with SLAs
- Escalate high-priority or complex alerts to senior-level personnel
- Document resolution steps, root cause, and remediation clearly for audit and knowledge-base purposes
- Maintain healthy agent deployment, connectivity, and reporting for endpoint detection and response (EDR) and managed detection and response (MDR) platforms across client environments
- Troubleshoot agent health issues, including offline agents, failed updates, misconfigurations, and tamper alerts
- Coordinate with vendor support teams to resolve platform issues, open support cases, and track resolution
- Assist with onboarding new clients and endpoints into security monitoring platforms
- Review and act on alerts generated by EDR and MDR platforms
- Monitor network security services, licensing status, and alerts for client firewalls
- Triage potential incidents and escalate when necessary
- Assist senior personnel with investigations, including evidence gathering, log review, and timeline reconstruction
- Support containment activities such as isolating endpoints or disabling accounts, as directed
- Help draft incident summaries and after-action reports
- Participate in post-incident reviews to identify process improvements
- Perform business email compromise (BEC) investigations for high-severity phishing tickets, including review of sign-in logs, inbox rules, mail forwarding, MFA changes, OAuth app consents, and message traces
- Execute BEC containment steps as directed, such as revoking sessions, resetting credentials, removing malicious inbox rules, and purging malicious messages across mailboxes
- Regularly review security posture scores (such as Microsoft Secure Score) across client cloud tenants and identify improvement opportunities
- Implement approved configuration changes, such as conditional access, MFA enforcement, mail flow rules, and identity protection policies, to raise posture scores
- Track progress and report on posture trends to leadership and clients
- Help recommend and document security baseline standards across the client base
- Administer the security awareness training platform, including enrolling users, assigning modules, and tracking completion
- Manage and analyze phishing simulation campaigns, report on click rates, and follow up on repeat clickers
- Assist in developing or curating training content and communications for end users
- Generate training compliance reports for internal and client stakeholders
- Track firmware versions on firewalls and networking equipment against vendor advisories, and flag devices not on a secure, stable, supported release
- Assist with planning and scheduling firmware updates in coordination with the network team
- Verify that configuration backups for network devices are current
- Assist with reviewing firewall rules for over-permissive access or exposed management interfaces
- Monitor backup job health across client environments and troubleshoot or escalate failed or missed jobs
- Assist with periodic test restores to validate backup integrity and document results
- Help verify that backup configurations meet retention and immutability or offsite standards
- Monitor and support patch compliance across endpoints and servers, flagging systems that fall out of compliance
- Assist with vulnerability scanning, reviewing results, and tracking remediation to closure
- Support identity and access management tasks such as access reviews, MFA enrollment assistance, and offboarding security checks
- Assist with compliance and audit support, such as evidence gathering for frameworks like NIST, CIS, SOC 2, HIPAA, or cyber insurance questionnaires
- Participate in an on-call or after-hours escalation rotation as needed
- Review firewall, email security, and endpoint logs for anomalies
- Support the creation of client-facing security reports and quarterly business review content
- Stay current on emerging threats, vulnerabilities, and industry best practices
- Perform other security-related duties as assigned
Requirements
- 1- 2 years of experience in security engineering, cybersecurity, network engineering, system administration, or related IT work; computer science or equivalent practical knowledge is relevant.
- Basic understanding of networking concepts (TCP/IP, DNS, firewalls) and endpoint security concepts
- Familiarity with Microsoft 365 or comparable cloud productivity ecosystems, including identity, email, and endpoint management
- Strong attention to detail and ability to follow documented processes
- Strong written communication skills for ticket documentation and reporting
- Ability to work both independently and collaboratively, escalating appropriately when unsure
- Industry certification such as CompTIA Security+ or Network+, or actively pursuing one
- Prior exposure to EDR or MDR platforms
- Prior exposure to SIEM or PSA/ticketing platforms
- Experience in a managed service provider (MSP/MSSP) or multi-client environment
Benefits & conditions
- 401(k)
- 401(k) matching
- Dental insurance
- Flexible spending account
- Health insurance
- Life insurance
- Paid time off
- Parental leave
- Professional development assistance
- Referral program
- Vision insurance
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.indeed.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this roleβ¦