IT Security Engineer

CoolSys • UNAVAILABLE, UNAVAILABLE

1d

About The Position

CoolSys is seeking a mid-level Security Engineer to support security operations across a geographically distributed, multi-architecture environment. The role is intended for an engineer with 4 to 8 years of progressively responsible security operations or engineering experience. The engineer implements, operates, and improves security controls across enterprise identity, cloud, network, endpoint, server, and application environments. This individual-contributor position combines hands-on engineering, automation, production troubleshooting, security assessment, and cross-functional delivery.

The successful candidate independently delivers practical security improvements within architectures, standards, and strategic direction established by senior technical staff. The role handles well-defined engineering objectives and routine-to-complex technical problems; enterprise architecture, security strategy, policy ownership, and final approval of high-risk exceptions remain with senior engineers, architects, or security leadership. The position participates in a reasonable on-call rotation and occasional after-hours maintenance, coordinating changes carefully, communicating service impact, following escalation procedures, and maintaining accurate records.

Requirements

• 4 to 8 years of progressively responsible security operations or engineering experience.
• Hands-on experience delivering improvements in cybersecurity, infrastructure, networking, cloud operations, identity, DevOps, or systems engineering.
• Working knowledge across identity, networking, cloud, endpoint, and application security, with deeper practical capability in at least two areas.
• Ability to explain technical work as a coherent sequence, including initial condition, evidence collected, diagnosis, change made, validation method, result, and lessons learned.
• Experience distinguishing personal contributions from broader team responsibilities.
• Ability to support technical claims with consistent details about architecture, protocols, dependencies, scale, failure modes, constraints, and testing methods.
• Experience using appropriate measures such as remediation time, vulnerability age, control coverage, deployment success rate, alert fidelity, authentication failure rate, automation time saved, or reduction in privileged access.
• Sound judgment when handling credentials, tokens, certificates, private keys, service accounts, and production changes.
• Clear written and verbal communication with technical and nontechnical stakeholders.
• Ability to demonstrate a sound troubleshooting methodology, practical depth in selected areas, and capacity to learn unfamiliar systems with appropriate guidance.
• Ability to coordinate changes, communicate service impact, follow escalation procedures, and maintain accurate records during on-call rotation and occasional after-hours maintenance.

Nice To Haves

• Deeper experience in one or more areas such as Microsoft Entra ID, OAuth/OIDC, Active Directory, Kerberos, AD CS, network traffic analysis, GitHub security, CI/CD integration, Azure workload identities, PowerShell, Python, or REST APIs.
• Familiarity with the NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, CIS Benchmarks, Microsoft security baselines, or comparable guidance.
• Microsoft Azure or security certifications, CompTIA Security+, GIAC certifications, or equivalent demonstrated experience.

Responsibilities

• Implement and maintain approved security controls for Microsoft cloud services, enterprise identity, networks, endpoints, servers, applications, and software-delivery processes.
• Deliver assigned technical work through requirements analysis, implementation, testing, deployment, documentation, and operational handoff.
• Independently investigate production security issues within areas of proficiency and collaborate with senior engineers, platform owners, or vendors when issues cross unfamiliar architectural boundaries.
• Automate repeatable security operations using PowerShell, Python, REST APIs, JSON, configuration management, or infrastructure automation.
• Integrate security platforms with Azure services, GitHub, CI/CD pipelines, identity systems, logging platforms, ticketing workflows, and notification services.
• Assess control effectiveness, recommend remediation, and validate that approved changes reduce risk without unacceptable operational impact.
• Support incident investigations using identity activity, network flows, endpoint telemetry, application logs, cloud events, and configuration evidence.
• Produce implementation records, architecture diagrams, troubleshooting guides, test plans, rollback procedures, and operational runbooks.
• Implement GitHub repository and workflow protections, including branch controls, pull-request reviews, secrets management, deployment approvals, least-privilege permissions, and automated security testing.
• Integrate static, dependency, secret, infrastructure-as-code, or configuration scanning into CI/CD pipelines; implement approved deployment gates, tune noisy findings, document exceptions, and track remediation with application and DevOps teams.
• Configure and troubleshoot Microsoft Entra ID capabilities, including Conditional Access, multifactor authentication, enterprise applications, application registrations, service principals, managed identities, workload identities, role-based access control, consent, and privileged access.
• Investigate OAuth 2.0 and OpenID Connect failures using tokens, claims, scopes, permissions, redirect URIs, credentials, sign-in logs, and access policies.
• Support Active Directory Domain Services, including organizational units, Group Policy, domain controllers, DNS dependencies, Kerberos, SPNs, delegation, LDAP/LDAPS, service accounts, gMSAs, and hybrid identity.
• Support reviews of Active Directory Certificate Services and PKI configurations, including certificate templates, enrollment permissions, trust chains, certificate authentication, renewal, revocation, private-key protection, and potentially unsafe issuance paths.
• Trace application flows across network and security boundaries, including IPv4 subnets, VLANs, routes, stateful firewalls, SNAT, DNAT, proxies, load balancers, VPNs, DNS, and RADIUS-controlled access.
• Use packet captures, flow records, logs, route analysis, and configuration reviews to distinguish network, firewall, proxy, TLS, authentication, and application failures.
• Implement and validate defined improvements to vulnerability remediation, hardening, least privilege, endpoint protection, cloud configuration, logging, monitoring, and detection coverage.
• Participate in threat modeling and secure architecture reviews for new systems, APIs, integrations, and infrastructure changes.
• Deliver planned security improvements while responding to production issues, and prioritize work with the manager when urgent support affects delivery.
• Implement assigned changes within established designs and seek review before architectural changes or accepting significant risk.
• Test changes, follow change-control procedures, prepare rollback steps, and verify controls after deployment.
• Trace and resolve issues across identity, network, cloud, endpoint, and application boundaries; involve platform owners or senior engineers when needed.
• Partner with application, networking, cloud, and support teams to address dependencies and make solutions maintainable.
• Document configurations, decisions, test results, and handoff procedures so others can operate and troubleshoot solutions.
• Report progress, blockers, trade-offs, and residual risks; use observable results or credible measures to show whether work achieved its objective.

Benefits

• Medical, dental, vision, and prescription coverage, including medical coverage starting at $0 per paycheck.
• Paid vacation, holidays, and floating holiday.
• 401(k) with company match.
• Company-sponsored life insurance and optional AD&D, short- and long-term disability.
• Tuition reimbursement.
• Employee discounts on vehicles, hotels, theme parks, select cell phone bills, and more.
• Pet insurance.
• Legal plan and ID theft protection.
• Competitive pay from $90,000 to $110,000 depending on relevant experience.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed