Security Engineer

The Security Engineer is responsible for strengthening our defenses through technical expertise. You'll own critical security platforms, ensuring they are optimally configured, maintained, and effectively utilized to protect our clients’ assets.  You'll configure, maintain, audit, and automate daily processes to ensure the efficiency and effectiveness of these platforms. You'll handle complex tool requests and configuration challenges, contributing to a more robust and resilient security posture.  

• This is a remote position; however, team members should be willing and able to travel if the need arises, though such travel is expected to be infrequent. Candidates with proximity to one of our Centers of Excellence are preferred (Lombard, IL; McLean, VA; Shreveport, LA; Overland Park, KS). 
• This role also includes participation in a rotating on-call schedule.

• →Manage & Configure Security Tools: Configure, maintain, optimize, and troubleshoot core security platforms to ensure they are functioning effectively and aligned with security policies. 
• →Handle Advanced Tool Requests: Process escalated or complex requests from the Security Analyst team regarding security tools, including global/difficult exclusions, user access management, and changes requiring engineer-level permissions. ​
• →Conduct Tool Audits & Reviews: Perform regular reviews and audits of security tool configurations (e.g., quarterly settings reviews) to ensure compliance, identify misconfigurations, and resolve configuration-related alerts. ​
• →Develop Security Automation: Create, test, and maintain scripts (using languages like PowerShell, Bash, etc.) to automate tasks related to vulnerability management (e.g., mass deployment, reporting, remediation) and security alert handling (e.g., improving log collection).
• →Collaborate with Security Team: Work closely with fellow Security Analysts and Security Engineers, sharing information, participating in team discussions, and contributing to a collaborative security environment.
• →Working Escalated Tickets: Work tickets that have been escalated to you, and potentially coach Security Analyst I and Security Analyst II on next steps.
• →Engage with Users/Clients: Communicate professionally and clearly with end-users or clients to gather details about potential security issues, explain security procedures, or provide guidance during incident resolution.
• →Liaise Across Departments: Interact effectively with other teams (e.g., Reactive Support, Client Strategy, NOC) to coordinate security responses and share necessary information.
• →Document Actions: Maintain accurate and detailed records of investigations, actions taken, communications, and resolutions within ConnectWise.
• →Provide Support: Offer timely and helpful support related to security inquiries, upholding a professional and customer-service-oriented approach in all interactions.
• →In the absence of engineering tasks, you will be expected to assist with ticket management—primarily by monitoring and responding to alert-related tickets

• 2-4 years of IT experience
• 1-3 years of experience in Cybersecurity - implementing, configuring, tuning, maintaining, and managing cybersecurity technologies, products, and services.
• This is a full-time role requiring your full alertness and reliable attendance during scheduled hours. Additional outside employment, regardless of hours, is not permitted
• CompTIA Security+, CompTIA Network+, Microsoft SC-900, Microsoft SC-200, or Microsoft AZ-500 are a plus
• Experience with security infrastructure software and hardware.
• Foundational background in one or more of the following areas: networking, operating systems, databases, cloud environments, and/or architecture.
• Working knowledge of one or more of the following platforms (or comparable solutions):
  • SentinelOne
  • Microsoft Defender for Endpoint
  • Microsoft Sentinel
  • Huntress EDR/ITDR/SAT
  • Arctic Wolf
  • Threatlocker
  • ConnectSecure

• Bachelor’s degree in computer science, Information Technology, or a related field. 
• Proven experience as a Security Engineer or in a similar role. 
• Strong understanding of cyber threats, security principles, and technical expertise. 
• Familiarity with various security architectures and protocols. 
• Excellent problem-solving skills and attention to detail. 
• Ability to work independently and as part of a team. 
• Strong communication skills to effectively train staff and report to management. 
• This role involves extended periods of sitting or standing and regular use of computers and office equipment

• Desired certifications:
  • Security +
  • CCNA Security
  • CCNP Security
  • CISSP
    
    

• Ability to communicate professionally, in English, both written and orally
• Ability to write business correspondence and process procedures
• Ability to effectively present information and respond to questions from groups of managers, clients, and the general public