Security Engineer / Cybersecurity Specialist

We are seeking an experienced and proactive Security Engineer to manage and enhance our organization’s cybersecurity posture. The ideal candidate will have strong hands-on experience with endpoint security, threat detection, vulnerability management, and SOC coordination, along with a solid understanding of modern security frameworks and best practices.

Responsibilities

Manage and optimize endpoint security solutions including ThreatLocker, SentinelOne, Microsoft Defender, Huntress, and Field Effect; Monitor, investigate, and respond to security alerts, threats, and suspicious activities; Perform root cause analysis and implement corrective and preventive actions; Continuously improve endpoint protection strategies aligned with Zero Trust principles; Operate and manage vulnerability assessment tools such as Tenable; Identify, prioritize, and remediate security vulnerabilities across systems and infrastructure; Collaborate with IT teams to ensure timely patching and risk mitigation; Administer MFA and identity protection solutions (e.g., Duo); Monitor and audit user activities using tools like ADAudit Plus; Enforce least privilege access and identity governance best practices; Review and analyze SOC reports from external security providers; Correlate alerts across multiple security tools and platforms; Drive incident response actions based on findings; Enhance detection rules, playbooks, and response workflows; Manage security awareness programs using platforms like KnowBe4; Conduct phishing simulations and track user risk metrics; Ensure compliance with organizational and regulatory security standards; Manage endpoint encryption using BitLocker; Oversee backup and recovery solutions such as Cove Data Protection; Ensure data integrity, availability, and secure storage practices; Prepare and present security reports, dashboards, and metrics; Provide insights into threat trends, vulnerabilities, and risk posture; Recommend improvements to security architecture, tools, and processes

Requirements

4-5 years of experience in cybersecurity or security engineering; Strong hands-on experience with EDR/XDR tools (e.g., SentinelOne, Microsoft Defender); Strong hands-on experience with application control solutions (e.g., ThreatLocker); Strong hands-on experience with vulnerability management tools (e.g., Tenable); Experience in SOC operations, incident response, and threat hunting; Knowledge of identity and access management (MFA, auditing tools); Familiarity with backup, encryption, and endpoint security practices; Strong understanding of security frameworks such as NIST and ISO 27001; Strong analytical and problem-solving abilities; Ability to manage critical incidents and escalations effectively; Excellent communication and stakeholder management skills; Leadership mindset with mentoring capabilities

Nice to have

Experience with MDR providers such as Huntress or Field Effect; Knowledge of cloud security (Azure, AWS, GCP); Relevant certifications: CEH, CISSP, Security+, AZ-500