Cyber Security Engineer

Summary

Design and support secure infrastructure across cloud and on-prem environments while managing key security tools and processes. This role focuses on integrating security into development workflows, responding to incidents, and driving automation to improve efficiency. Success in this position requires strong scripting skills, a collaborative mindset, and a solid understanding of modern security practices and compliance standards.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Engineer and sustain a hybrid‑security architecture that protects on‑premises infrastructure, Microsoft Azure services, and Microsoft 365, ensuring high availability and documented secure baselines.
• Serve as the primary security‑engineering liaison to the managed SOC, refining detection logic, tuning alert thresholds, and providing Tier‑3 escalation support for complex incidents.
• Administer and optimize core security platforms including; endpoint protection, network detection, email/web filtering, firewalls, VPN, and backup / DR systems.
• Embed DevSecOps controls into CI/CD pipelines (Azure DevOps), integrating SAST, DAST, secret‑scanning, IaC checks, and policy gate reviews; facilitate threat modeling and secure‑code standards with development teams.
• Run the vulnerability‑management program: schedule scans, validate and risk‑rank findings, drive remediation with system owners, and report key metrics to the CISO.
• Govern identity and privileged access across on‑prem Active Directory and Microsoft Entra ID (Azure AD); enforce least‑privilege roles, MFA, periodic entitlement reviews, and break‑glass