Security Engineer

Airspace Link Inc•Detroit, MI

27d•Hybrid

About The Position

Airspace Link is seeking a Security Engineer to support the security posture of our SaaS platform and internal cloud environment. This role is a strong contributor position focused on hands-on execution—working within established architectures and processes to help improve detection, response, and security controls across the Microsoft ecosystem. You’ll collaborate with IT, engineering, and compliance teams to assess issues, implement solutions, and support ongoing alignment with ISO 27001, 27701, 9001, SOC 2, and FAA LAANC requirements.

Requirements

2–5 years of experience in security engineering, cloud security, SOC/IR operations, or related hands-on security roles.
Working knowledge of Azure security concepts and Microsoft cloud security tools.
Practical experience with: Microsoft Defender for Cloud, Endpoint, Identity, and Cloud Apps Microsoft Sentinel (KQL querying, incident investigation, dashboards) Microsoft Intune / Endpoint Manager (MDM/MAM) Microsoft Purview (DLP and compliance tooling)
Hands-on experience supporting vulnerability remediation with engineering teams.
Familiarity with Terraform, secure CI/CD practices, and cloud configuration management.
Strong written and verbal communication skills with the ability to collaborate cross-functionally.

Nice To Haves

CompTIA Security+
Microsoft SC-200: Security Operations Analyst
Microsoft SC-300: Identity and Access Administrator
Microsoft AZ-500: Azure Security Engineer Associate
CompTIA CySA+ or PenTest+
ISC2 CC (Certified in Cybersecurity)
ISACA CISM or CRISC (nice to have)

Responsibilities

Assist with implementing and maintaining security controls within Azure and SaaS environments.
Support the incident response lifecycle, including initial investigation, coordination with engineering, and documentation of remediation actions.
Monitor, tune, and assist in the operation of the Microsoft Defender suite (Defender for Cloud, Endpoint, Identity, Cloud Apps, and Vulnerability Management).
Support mobile device management (MDM) and endpoint compliance using Microsoft Intune and Endpoint Manager.
Partner with engineering teams to identify, prioritize, and track remediation of vulnerabilities across applications, cloud infrastructure, and CI/CD pipelines.
Help implement and maintain Entra ID Conditional Access and Privileged Identity Management (PIM).
Assist in integrating DevSecOps guardrails within Azure DevOps and GitHub pipelines (e.g., CodeQL, IaC scanning, secret governance).
Participate in developing dashboards and analytics in Microsoft Sentinel, including KQL queries and incident correlation support.
Contribute to threat modeling and risk assessments as part of project reviews.
Support the creation and upkeep of security configuration baselines, Terraform modules, and policy templates.
Assist with internal and external audits aligned with ISO, NIST CSF, and FAA frameworks.