Security Engineer

b5d87377-1bbe-4787-8322-eb5c7abdc9c7 • Chandler, AZ

8h

About The Position

The Security Engineer designs, implements, and manages security tools that protect IT and operational technology (OT) environments. The role ensures the availability, integrity, and effectiveness of security solutions and calls for a proactive problem solver with a strong technical background and an interest in cybersecurity innovation.

The engineer configures and maintains security platforms, automates security workflows, improves detection and monitoring, supports endpoint and network security, and manages vulnerability remediation. The role also includes incident response support, security reviews, reporting, documentation, audit evidence, and collaboration with internal teams, service providers, and vendors.

The position may involve working with OT, industrial control systems (ICS), or SCADA environments, particularly in energy or other critical infrastructure. NovaSource describes its broader work as providing operations and maintenance services for renewable energy assets and investing in employee development through assessment and mentorship.

Requirements

• Three or more years of relevant experience in security engineering, security operations, or a related technical role, with demonstrated hands-on security responsibilities.
• Experience implementing, administering, and troubleshooting security platforms across several areas such as SIEM, EDR, DLP, network security, and vulnerability management.
• Ability to develop scripts or automation using PowerShell, Python, or a similar language, including working with APIs and structured data.
• Working knowledge of Windows and Linux systems, networking fundamentals, authentication, access controls, and common attack techniques.
• Experience collecting and analyzing security logs, tuning alerts, and investigating potential security incidents.
• Experience prioritizing vulnerabilities, coordinating remediation with system owners, and communicating findings through useful reports and metrics.
• Ability to troubleshoot complex technical issues and evaluate the operational impact of security changes.
• Strong written and verbal communication skills, including the ability to explain technical findings to audiences with different levels of technical knowledge.
• Experience securing operational technology (OT), industrial control systems (ICS), or SCADA environments, particularly in energy or other critical infrastructure.
• Ability to manage competing priorities, take ownership of assigned work, and collaborate across teams.
• A degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.

Nice To Haves

• Familiarity with NERC Critical Infrastructure Protection (CIP) standards and experience implementing controls, maintaining evidence, or supporting compliance assessments.
• Experience with cloud security, identity security, or Microsoft 365 security capabilities.
• Experience with security orchestration, automation, and response (SOAR), infrastructure as code, or version control.
• Experience supporting a secure software development lifecycle (SDLC), including threat modeling, application security testing, dependency scanning, secrets management, or security integration into CI/CD pipelines.
• Relevant certifications such as Security+, CySA+, GSEC, GCIH, GCIA, CISSP, or certifications associated with security platforms used by the organization.

Responsibilities

• Implement, configure, maintain, and troubleshoot security technologies, including SIEM, EDR, DLP, vulnerability scanning, and network security platforms.
• Develop scripts, integrations, and workflows to automate routine security tasks, enrich alerts, streamline investigations, and improve reporting.
• Onboard and validate log sources, develop and tune detection rules, build dashboards, and improve alert quality and coverage.
• Manage endpoint security policies, monitor deployment and agent health, troubleshoot issues, and coordinate improvements with IT teams.
• Implement and tune DLP policies, investigate policy violations, and work with business stakeholders to protect sensitive information.
• Support firewalls, network segmentation, secure remote access, intrusion detection and prevention, and other network security controls.
• Operate vulnerability scanning tools, validate findings, prioritize remediation based on risk, track corrective actions, and verify remediation.
• Produce actionable reports on vulnerabilities, security tool coverage, control effectiveness, and remediation progress for technical teams and leadership.
• Investigate security alerts and support incident containment, remediation, recovery, and lessons learned.
• Assess new technologies and changes to existing systems, recommend practical safeguards, and support secure configuration and system hardening.
• Maintain technical documentation, operating procedures, runbooks, and configuration records; support audits and assessments by providing evidence of security control operation.
• Work with internal teams, service providers, and vendors to resolve issues and improve the reliability and effectiveness of security capabilities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level