IT Security Lead

Overview:

We’re looking for a hands-on IT Security Lead to help operate and strengthen an internal security program within a regulated environment. This role covers security operations, identity and access management, endpoint and network security, vulnerability management, compliance, and incident response.

This is a great opportunity for someone with broad cybersecurity experience who can work independently, collaborate across teams, and grow into a senior security role.

What You’ll Do:

• Own day-to-day cybersecurity operations and respond to SIEM/EDR alerts and security incidents.
• Manage Active Directory, Microsoft Entra ID, SSO, MFA, privileged access, and access reviews.
• Support endpoint security, patching, encryption, secure configurations, and vulnerability remediation.
• Support firewalls, VPNs, network segmentation, wireless security, and network monitoring.
• Run vulnerability scans and coordinate remediation with IT and system owners.
• Support incident response, ransomware recovery, disaster recovery, and business continuity.
• Help maintain compliance with CMMC, DFARS, NIST, ITAR/export controls, and ISO 27001.
• Protect CUI and FCI environments and maintain required documentation and audit evidence.
• Support customer/security audits and vendor security reviews.
• Manage security awareness training and phishing simulations.
• Evaluate and implement new security technologies and processes.

Required Qualifications:

• 3+ years of hands-on IT security/cybersecurity experience across multiple security areas.
• Strong experience with SIEM, EDR, vulnerability management, endpoint security, and incident response.
• Strong Microsoft experience, including Windows, Active Directory, Microsoft 365, Entra ID, MFA, and SSO.
• Strong networking/security fundamentals, including firewalls, VPNs, segmentation, authentication, and secure configurations.
• Practical experience with CMMC and CUI/FCI, ideally with exposure to DFARS, NIST, or ITAR/export-controlled environments.