We are seeking a Systems Engineer to own, architect, and maintain our Microsoft security stack (O365 Sentinel, Defender, Purview) and overall electronic communications and file sharing technology infrastructure.
Requirements
- Administer and maintain security tooling across the Microsoft environment.
- Manage and optimize security dashboards, alerts, and reporting for threat detection, incident response, and risk metrics.
- Build and maintain compliance reporting to support NIST 800-171 controls, working with compliance lead and vendors to align technical controls with policy.
- Implement and maintain security tooling (automation, playbooks) to reduce manual work, improve reaction times, and ensure consistency.
- Own change management documentation for all security-related system changes across our Microsoft cloud environment, including SIEM, endpoint security, identity, and data governance controls.
- Monitor security events, triage alerts, investigate potential incidents, and support remediation efforts in coordination with other MSP.
- Conduct regular tuning of detection rules, logs, and telemetry to reduce noise and improve coverage.
- Assist MSP in threat hunting, threat modeling, and proactive security assessments
- Manage data governance and classification via Purview (or equivalent): define and enforce data classification, labeling, retention, and access policies.
- Provide technical oversight for user and endpoint security posture; integrate Defender with identity, endpoint, and cloud infrastructure.
- Maintain and test incident response procedures and playbooks with regards to Covered Unclassified Information (CUI).
- Support security best practices for cloud infrastructure, identity management, access control, and data protection.
- Provide training and mentorship to other IT staff on Sentinel, Defender, Purview, and security processes.
- Collaborate with auditors, compliance leads, and external assessors to prepare for assessments (e.g., NIST, CMMC ISO, etc.).
- Stay current on Microsoft security offerings, emerging threats, and best practices, and make recommendations for improvements.
Benefits
- Generous Paid Time Off
- 401k Matching
- Retirement Plan
