Security Engineer

Managed Group LLC•Belcamp, MD

11d

About The Position

The Security Engineer implements, maintains, and improves security controls across client environments and maintains internal MSG infrastructure. The role supports incident response, endpoint security, Microsoft 365 security configuration, vulnerability remediation, and compliance execution, including NIST and CMMC readiness. It requires strong technical ownership, sound judgment, and the ability to work independently across multiple client environments and internal infrastructure. The engineer is expected to take issues through resolution, document work accurately, communicate with technical and non-technical stakeholders, apply established security standards, prioritize competing demands, identify and escalate risks, and improve and standardize security processes, tooling, and client security baselines. The position supports security operations and response across endpoint, email, identity, and cloud platforms; endpoint hardening; Microsoft 365 and Entra ID security; vulnerability management and remediation; and execution of compliance frameworks such as NIST 800-171 and CMMC. It also includes maintaining SOPs, security runbooks, client documentation in ITGlue, ticket notes, investigation details, and remediation records. Employment is contingent on completion of a background check and drug test; skills testing may be required during the interview process. The role may require lifting equipment weighing 25 lbs. Because employees may access sensitive government data, compliance with federal regulations including ITAR/EAR is required, and U.S. citizenship is mandated. Compensation is based on experience.

Requirements

4–6 years of technical IT experience, including at least 2 years of security experience.
Strong troubleshooting ability across Windows endpoints and common security failure modes.
Strong troubleshooting ability with identity and authentication issues, including MFA, Conditional Access, and account compromise.
Strong troubleshooting ability with Microsoft 365 security configurations.
Working knowledge of TCP/IP, DNS, VPNs, and firewall concepts.
Working knowledge of common attack vectors, including phishing, credential theft, and ransomware.
Working knowledge of endpoint hardening and patch management best practices.
Experience supporting the Microsoft Defender suite.
Experience with Microsoft Entra ID administration and security controls.
Experience with log analysis, security alert triage, and investigation.
Familiarity with NIST SP 800-171 and CMMC requirements.
Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience.
CompTIA Security+ certification required.
Must complete a background check and drug test; U.S. citizenship is required due to ITAR/EAR compliance requirements.

Nice To Haves

Experience with SIEM platforms.
Experience with PowerShell or another scripting language.
Experience with vulnerability management, incident response, and security-control implementation.
CompTIA CySA+ certification.
Microsoft Certified: Security Operations Analyst Associate (SC-200) certification.
Skills testing may be required during the interview process.

Responsibilities

Monitor and respond to security alerts across endpoint, email, identity, and cloud platforms.
Triage and investigate suspicious activity, including phishing, malware, lateral movement indicators, and unauthorized access attempts.
Perform containment actions such as device isolation, credential resets, policy changes, and IOC blocking.
Coordinate escalation and communication with internal leadership and clients as needed.
Participate in post-incident reviews and recommend improvements.
Ensure client and internal endpoints meet baseline security standards for patching, encryption, antivirus/EDR coverage, and least privilege.
Support remediation of malware and persistent threats.
Manage and enforce device compliance policies through Intune where applicable.
Configure and support Microsoft Defender security controls, including Defender for Endpoint and Defender for Office.
Support Microsoft 365 identity protection, including MFA, Conditional Access, SSO integrations, and risky sign-in remediation.
Secure Exchange Online through anti-phishing policies, mail flow rules, and quarantine management.
Support secure SharePoint and OneDrive access controls and external sharing governance.
Assist with secure tenant configurations and security posture improvements.
Run or support vulnerability scans and interpret results.
Prioritize vulnerability remediation based on risk and business impact.
Coordinate patching and configuration changes with IT and client stakeholders.
Validate remediation actions and document outcomes.
Support client security initiatives aligned with NIST 800-171 and CMMC for GovCon Managed Services.
Maintain security-related documentation and help standardize baseline security controls across environments.
Create and maintain SOPs, security runbooks, and client security documentation in ITGlue.
Maintain accurate ticket notes, investigation details, and remediation steps.
Identify recurring security issues and propose standard improvements.
Improve consistency in security baselines, tool usage, and escalation procedures.