Senior Cybersecurity Engineer

Sheppard Pratt • Towson, MD

8h

About The Position

This role involves leading the engineering, configuration, deployment, and operational maintenance of the organization’s cybersecurity toolset, with a primary focus on Microsoft Defender (EDR/XDR, MDR), Microsoft Sentinel (SIEM/SOAR), and Microsoft Purview. The engineer will implement key initiatives from the organization’s three-year cybersecurity strategic roadmap, translating strategic objectives into actionable technical solutions. Responsibilities include designing and maintaining security automations, detections, and response playbooks to improve efficiency, consistency, and response time. The role also involves developing, documenting, and maintaining technical cybersecurity standards, architectures, and engineering patterns. The Senior Cybersecurity Engineer will serve as a subject matter expert for Microsoft on-premises and cloud security controls within a hybrid Active Directory environment transitioning to Azure and cloud-native services. Collaboration with IT Infrastructure, Operations, and Applications teams is crucial to ensure security is embedded into system designs, migrations, and operational processes. Continuous evaluation of security tooling, configurations, and architectures against industry best practices and evolving threats is expected. The role supports incident response activities by providing advanced technical expertise, root cause analysis, and recommendations for long-term remediation. Maintaining clear technical documentation related to security platforms, configurations, and operational procedures, as well as mentoring and providing technical guidance to cybersecurity team members and peer technology teams, are also key aspects of this position.

Requirements

• Completion of a bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent formal training or certification (e.g. CISSP).
• Seven or more years of progressive experience in cybersecurity engineering, security architecture, or related technical roles.
• Strong hands-on experience designing, configuring, and supporting Microsoft security platforms, including Microsoft Defender, Sentinel, and Purview, or comparable enterprise security technologies.
• Demonstrated experience securing hybrid environments involving on-prem Active Directory and cloud identity platforms such as Azure AD (Entra ID).
• Advanced understanding of security engineering principles, including endpoint protection, identity security, logging and monitoring, threat detection, and response.
• Proficiency with PowerShell and experience with additional scripting or automation languages (e.g., Python, KQL) to support security operations and automation.
• Familiarity with security frameworks and best practices (such as NIST, CIS, or ISO 27001) and the ability to translate them into technical controls.

Responsibilities

• Lead the engineering, configuration, deployment, and operational maintenance of the organization’s cybersecurity toolset, with a primary focus on Microsoft Defender (EDR/XDR, MDR), Microsoft Sentinel (SIEM/SOAR), and Microsoft Purview.
• Implement key initiatives from the organization’s three-year cybersecurity strategic roadmap, translating strategic objectives into actionable technical solutions.
• Design and maintain security automations, detections, and response playbooks to improve efficiency, consistency, and response time.
• Develop, document, and maintain technical cybersecurity standards, architectures, and engineering patterns that guide IT Infrastructure, Operations, and Applications teams.
• Serve as a subject matter expert for Microsoft on-premises and cloud security controls within a hybrid Active Directory environment transitioning to Azure and cloud-native services.
• Collaborate closely with IT Infrastructure, Operations, and Applications teams to ensure security is embedded into system designs, migrations, and operational processes.
• Continuously evaluate security tooling, configurations, and architectures against industry best practices and evolving threats.
• Support incident response activities by providing advanced technical expertise, root cause analysis, and recommendations for long-term remediation.
• Maintain clear technical documentation related to security platforms, configurations, and operational procedures.
• Mentor and provide technical guidance to cybersecurity team members and peer technology teams.

Benefits

• A commitment to professional development, including a comprehensive tuition reimbursement program to support ongoing education and licensure and/or certification preparation
• Comprehensive medical, dental and vision benefits for benefit eligible positions
• 403b retirement match
• Generous paid-time-off for benefit eligible positions
• Complimentary Employee Assistance Program (EAP)
• Generous mileage reimbursement program

What This Job Offers

• Job Type: Full-time
• Career Level: Senior