Security Engineer

SUMMARY

As a Security Engineer, you will be responsible for provisioning, managing, and ensuring optimal operation of company managed solutions, including but not limited to endpoint protection, vulnerability management, and firewall solutions. This position will stay up to date with the latest technology and capabilities, as well as provide escalation and troubleshooting support to company service teams and our clients as needed.

JOB RESPONSIBILITIES

• Have and maintain a proficient understanding of company’s managed solutions, security architecture, and how it is designed to operate daily. Manage and maintain these systems on a day-to-day basis.
  
• Assist with review and evaluation of implemented technology solutions to ensure they are configured appropriately to company standards, optimized, and being fully utilized. Work with vendors as needed to ensure optimal utilization.
  
• Provide advanced technical support, remote help desk services, and consultative recommendations to company clients related to supported applications. Own technical relationships with assigned teams and clients where engaged.
  
• Identify recurring issues within managed networks, systems, and applications, and assist with remediation or escalate within defined procedures, leveraging automation where possible to improve efficiency, performance, and reliability.
  
• Manage competing priorities and set expectations with stakeholders through proactive communication, planning, and potential return on investment.
  
• Be a point of escalation within the team to handle and resolve issues, involving direct management as needed.
  
• Respond in a timely manner to tickets and incidents within established procedures.
  
• Contribute to best practices within the organization, including but not limited to our technology practice groups, knowledge center, and any assigned committees and groups.
  
• Stay up to date with relevant state-of-the-art technology, equipment, and/or systems.
  
• Accurately maintain and comply with documentation, communication, time entry, and administrative procedures in a timely manner.
  
• Participate in on-call rotation and after hours work as required.
  
• Attend required company and departmental meetings.
  
• Act in accordance with policies and procedures as set forth in the Employee Handbook.
  
• Perform other related duties as assigned.
  

Primary Responsibilities:

• Security Engineers may meet with clients to understand their needs, use vulnerability management tools to identify weaknesses, develop hardening recommendations, present those recommendations, and perform hands-on remediation such as configuration changes and patching. Their work is often organized into scheduled blocks for specific clients and can be performed autonomously.
  

QUALIFICATIONS

Education and Experience

• An associate degree in computer or electrical engineering, computer science, cyber or information security, or related field.
  
• 4+ years of experience with information technology, up to two years of related education may be considered as experience.
  
• Proven experience with security concepts and technologies.
  

Licenses and Certifications

• Current vendor certifications for operating and managing solutions in company’s technology stack or relevant industry experience is required.
  
• Successful completion of an employment background check including criminal and financial history.
  

Required Skills:

• Experience with three or more of the following:
  
• Network and host firewalls
  
• Endpoint detection and response solutions
  
• Security information and event management
  
• Vulnerability management
  
• Email security solutions
  
• Network architecture
  
• Microsoft server and desktop operating systems
  
• Experience with common scripting and automation languages, such as PowerShell or Python.
  
• Experience with implementing, securing, and configuring solutions according to industry and vendor best practices.
  
• Knowledge and experience with common security frameworks and controls including NIST CSF or CIS CSC.
  
• Knowledge of service management concepts for IT and/or security operations and related standards.
  
• Proficiency with business collaboration tools such as Microsoft Office applications.
  
• Demonstrates attention to detail.
  
• Exceptional organizational and time/task management skills.
  
• Self-starter with the ability to perform with little or no direct supervision and takes initiative to improves processes.
  
• Excellent communication skills in working with technical and non-technical people, and the ability to develop and maintain collaborative relations among all levels of an organization.
  
• Treats people with respect; Works with integrity and ethically; Upholds organizational values.
  
• Follows policies and procedures; Completes administrative tasks correctly and on time; Supports organization's goals and values.
  
• Demonstrates accuracy and thoroughness; Looks for ways to improve and promote quality; Applies feedback to improve performance; Monitors own work to ensure quality.
  

Requirements And Interview Design:

• Focused on vulnerability remediation, client recommendations, security tooling, and technical implementation, with candidates evaluated through two one-hour interviews rather than a separate technical assessment.
  

Required Technical Skills:

• Identified network and host-based firewalls, endpoint detection and response, security information and event management systems, vulnerability management, troubleshooting, operating-system and vulnerability patching, vulnerability remediation, vendor-solution implementation, and Microsoft-oriented network architecture as core skills. Working knowledge of Python and PowerShell is required.
  

Role Scope - the role is heavily focused on:

• Vulnerability remediation
  
• Patching operating systems and vulnerabilities
  
• Security tooling and infrastructure management
  
• Customer-facing recommendations and remediation planning
  
• MSP experience is preferred but not required.
  
• Certifications are considered beneficial but not mandatory.
  
• Emphasized that Python and PowerShell knowledge are expected skills.
  

Key Skills Identified:

• Firewall knowledge (network and host-based)
  
• Endpoint Detection & Response (EDR)
  
• SIEM platforms
  
• Vulnerability management and troubleshooting
  
• Patching and remediation
  
• Microsoft-focused network architecture
  
• Python and PowerShell scripting
  

JOB REQUIREMENTS

• Should be willing to accept a long-term work-from-home arrangement.
  
• Standard work hours are Monday through Friday from 8:00 AM to 5:00 PM (CST) following US Time Zone. Hours may vary and include nights, weekends, and holidays.