Security Engineer

Job Title: Security Engineer

Reports To: Director of IT

Work Location: On-site

Status: Non-Exempt

Full Time/Part Time: Full-time



Summary:


The Security Engineer is responsible for designing, implementing, and maintaining the organization's cybersecurity systems and controls to protect business systems, networks, and data from cyber threats. This role serves as a key technical contributor to the enterprise security program, supporting governance, risk management, compliance (GRC), and incident response initiatives. The Security Engineer works closely with IT, operations, and business stakeholders to ensure a secure and resilient technology environment aligned with industry frameworks such as NIST.



Key Responsibilities:

• Security Engineering & Architecture
• Design and implement enterprise security solutions across networks, systems, cloud, and applications
• Define and document security requirements, standards, and secure configuration baselines •
• Develop and maintain security architecture aligned with organizational risk tolerance and compliance requirements Security Operations & Monitoring
• Work alongside network team to administer and maintain security tools (SIEM, EDR, firewalls, vulnerability scanners, etc.)
• Monitor systems for suspicious activity and respond to alerts and anomalies•
• Perform regular security assessments, audits, and vulnerability scans to identify risks Incident Response
• Lead or coordinate incident detection, triage, containment, and remediation activities •
• Support forensic investigations and document incident reports and lessons learned
• Continuously improve incident response procedures and playbooks
• Act as a first responder for cybersecurity incidents Risk & Compliance (GRC Integration)
• Conduct risk assessments and support remediation planning • Implement and validate controls aligned with frameworks such as NIST CSF, ISO 27001, or internal policies
• Support audit activities and compliance reviews
• Assist in the development and enforcement of security policies and procedures Vulnerability & Threat Management
• Identify, prioritize, and remediate vulnerabilities across infrastructure and applications
• Perform threat modeling and security testing for new systems
• Stay current with emerging threats and recommend mitigation strategies
• Collaboration & Awareness
• Work with IT and engineering teams to integrate security into system design and operations •
• Provide guidance on secure coding and system hardening practices • Support user awareness and training initiatives on cybersecurity best practices

Required Qualifications Education & Experience:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related fields.
• 3-7+ years of experience in cybersecurity engineering or related IT security roles
• Experience in enterprise IT environments (multi-site, manufacturing or hybrid IT/OT preferred) Technical Skills
• Strong knowledge of Network security (firewalls, IDS/IPS, segmentation) Endpoint security and EDR platforms, Identity and access management (IAM, MFA, SSO) Cloud security (Azure, AWS, or similar)
• Experience with SIEM tools and log analysis, Vulnerability scanning and remediation tools
• Security monitoring and incident response processes
• Familiarity with security frameworks (NIST, ISO, CIS Controls)

Click or tap here to enter text.



Physical Requirements:
The physical requirements for this office role include the ability to sit or stand for extended periods, typically up to 8 hours a day, and regularly operate standard office equipment such as computers and phones. Employees should be able to lift up to 15 pounds occasionally and frequently perform tasks that require typing, writing, and document handling. Effective verbal and written communication skills are necessary, along with adequate visual and auditory abilities to read materials and participate in meetings.



EEOC Statement:
Strategic Systems, Inc., and its affiliates, is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. We believe diversity drives innovation and we are dedicated to fostering a workplace that respects and values the contributions of all individuals.