System Security Engineer

Title Security Engineer Req Number CYB-24-00002 Requisition Category Active Full-Time/Part-Time Full-Time Location Remote, USA Description Pay Rate: The annual base salary range for this position $100k to $110K. Please note that the salary information is a general guideline only. At Sawdey Solution Services, we recognize that attracting the best talent is key to our strategy and success as a company. We will consider several factors when extending an offer to an applicant. These factors include (but are not limited to) the position, associated responsibilities, work experience, education, related training, and related skills. Position Location: Remote, USA Work Environment: Remote/Telework/Work from Home Who You'll Report To: This position will report directly to the Senior vCISO. About the Role: This position falls under the umbrella of Sawdey's Managed Services Division (MSD). Sawdey MSD is a full-service Managed Service Provider (MSP)/Managed Security Service Provider (MSSP) providing IT and/or cybersecurity services to a variety of different clients (defense/government contractors, municipalities, non-profits, commercial organizations, etc.). The Security Engineer will perform day-to-day deployment, administration, and support of security infrastructure tools and systems, including but not limited to SIEM, Vulnerability Management, IDS/IPS, Anti-Virus, Anti-Malware, EDR, DLP, and other Network or System Monitoring tools. Additional Responsibilities Include, but are not Limited To: Manage the deployment and maintenance of Microsoft Defender XDR. Understand and adhere to Cybersecurity Maturity Model Certification (CMMC) requirements. Supervise analysts and engineers performing vulnerability management activities and improve vulnerability management capabilities and results driven metrics for Sawdey MSD and clients. Monitor and remediate security events including working with clients, end users, and vendors to address the event. Configure, troubleshoot, and support Exchange Online, SharePoint Online, Teams, OneDrive for Business, Intune, and Azure Active Directory. Manage and deploy Intune in effort to meet policy and compliance goals. Recommend enhancements to existing processes, focusing on automation and integration between other security tools. Troubleshoot security issues and perform security incident response. Assist in maintaining documentation on security architecture, procedures, and configurations. May serve as a mentor to fellow Sawdey MSD team members. Participate in an on-call rotation. Perform other duties, as assigned. Experience Requirements: Five (5) + years' IT experience. Three (3) + years of Vulnerability Scanning and Mitigation experience. Two (2) + years of management experience. One (1) + year of remediating incidents in a Security Operations Center (SOC) or Network Operation Center (NOC). Experience performing active threat hunting, vulnerability remediation, and artifact gathering for security investigations including incident response. Experience implementing and configuring Microsoft Defender XDR and Azure Sentinel. Must be capable of working on cloud IaaS, PaaS, and SaaS systems, server infrastructure, and networking infrastructure. Must have experience working with at least some of the following: Windows Server 2016-2022 and server roles such as Active Directory, DHCP, Group Policy, and DNS Microsoft Defender XDR Azure Sentinel CrowdStrike PowerShell, Java, Python, Rust, Haskell Education Requirements: Bachelor's degree in an IT-related field desired. Certificate, License, and Registration Requirements: One or more of the following ce