Security Engineer

Security Engineer

The Security Engineer is responsible for protecting the organization's information systems, infrastructure, networks, cloud environments, endpoints, identities, data, and approved AI-enabled technologies through proactive monitoring, risk reduction, incident response, vulnerability management, and security control improvement. Reporting to the Infrastructure Manager, this role serves as a principal operational security partner within the Infrastructure & Engineering organization.

This position leads day-to-day security operations across infrastructure security, identity and access management, data protection, AI security governance support, compliance support, and operational resilience. The Security Engineer works closely with infrastructure, engineering, applications, vendor management, data, support, and business teams to translate security requirements into practical, enforceable controls across on-premises, cloud, hybrid, data, and AI-enabled environments.

The ideal candidate brings strong technical judgment, risk-based decision-making, clear communication, documentation discipline, and a demonstrated interest in functional leadership and mentoring employees.

Responsibilities and Duties

• Monitor, investigate, triage, and respond to security alerts, logs, events, and suspicious activity across network, server, cloud, endpoint, identity, email, AI-enabled, and business application platforms.
• Lead or coordinate incident response activities, including containment, remediation, root cause analysis, post-incident documentation, corrective actions, and stakeholder communication.
• Manage vulnerability and exposure management processes by identifying risks, prioritizing remediation, tracking corrective action, and partnering with infrastructure, engineering, applications, and business teams.
• Administer, tune, and improve security operations tools and controls such as SIEM/SOAR, EDR/XDR, vulnerability scanners, email security, firewall platforms, cloud security controls, identity security tools, and AI-related monitoring or governance controls.
• Perform access reviews, privileged access audits, identity configuration reviews, MFA validation, least-privilege assessments, and security control testing across company systems, data platforms, and approved AI-enabled tools.
• Support secure adoption of AI-enabled technologies by assisting with acceptable-use standards, data protection controls, risk assessments, access governance, monitoring practices, and security guidance for enterprise AI platforms and use cases.
• Monitor and respond to data mishandling, externally shared data, data exfiltration risks, and security events related to information protection, data governance, AI usage, and compliance requirements.
• Develop and maintain security standards, baselines, runbooks, incident response playbooks, security documentation, reporting processes, and operational procedures.
• Support security and compliance initiatives including data governance, ISO-aligned practices, audit readiness, vendor security reviews, policy enforcement, evidence collection, and AI governance readiness.
• Demonstrate leadership by mentoring technical peers, leading security improvement initiatives, improving team operating practices, and building the communication, judgment, and accountability expected across the Infrastructure & Engineering organization.
• Performs other related duties as assigned to support the organization's goals and objectives.

Requirements

• Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent work experience required
• 5+ years of progressive experience in information security, infrastructure operations, systems administration, network operations, cloud operations, or related technical discipline.
• Hands-on experience with security monitoring, incident response, vulnerability management, log analysis, root cause analysis, and remediation coordination.
• Working knowledge of enterprise infrastructure security across network, server, endpoint, identity, cloud, email, data, and hybrid environments.
• Experience with security tools and platforms such as SIEM/SOAR, EDR/XDR, vulnerability management, firewall, email security, cloud security, Microsoft security, Microsoft Purview, or data governance tools.
• Familiarity with emerging AI security, enterprise AI governance, data protection, acceptable-use controls, Microsoft Copilot security considerations, and AI risk management concepts preferred.
• Demonstrated leadership potential, including the ability to mentor peers, coordinate cross-functional work, and communicate clearly with technical and non-technical stakeholders.
• Security+, CySA+, CISSP, CISM, GIAC, Microsoft Security, Microsoft Azure, Google Cloud Platform, AWS Security, AI security, or related certification preferred.