Senior Information Security Engineer

Globus Medical•Audubon, PA

12d

About The Position

Globus Medical is seeking a Senior Information Security Engineer specializing in Microsoft security, identity protection, cloud threat detection, data protection, and incident response. The engineer will design, implement, and operationalize security controls across Microsoft 365, Microsoft Entra, Azure, Intune, Defender, and Purview, integrating Microsoft security telemetry with the broader security ecosystem, including CrowdStrike and Rapid7. The role leads complex identity and cloud-security investigations, develops and tunes detection and response capabilities, strengthens privileged-access and managed-device controls, and helps prevent unauthorized access and data exfiltration across enterprise services. It also establishes repeatable playbooks, supports post-incident remediation, mentors junior analysts, and turns technical findings into actionable operational and executive reporting. The position works with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers. Security changes are tested and deployed in a controlled manner to balance security improvements with business continuity. The employee must comply with company policies and applicable laws and regulations, complete required training, and represent the company professionally and ethically. Reasonable accommodations may be made for individuals with disabilities to perform essential functions.

Requirements

Bachelor’s degree in Information Security or a related field.
Microsoft Certified: Azure Security Engineer Associate, or Microsoft security operations, identity, or information-protection experience demonstrated through equivalent certifications or hands-on work.
Advanced proficiency with SIEM, EDR, SOAR, and vulnerability-management tools.
Strong scripting skills in Python, PowerShell, and Bash.
Deep understanding of cloud security, including AWS, Azure, and GCP.
Familiarity with DevSecOps and CI/CD security integration.
Experience with Zero Trust architecture and identity management.
Strong identity and access security knowledge, including MFA and phishing-resistant authentication, privileged access, identity protection, Active Directory, and hybrid identity environments.
Experience with security monitoring, threat detection, incident response, and threat hunting, including SIEM/XDR technologies and platforms such as Microsoft Defender, CrowdStrike Falcon, and Rapid7.
Experience protecting Microsoft 365 data and cloud services, including Exchange Online, SharePoint, OneDrive, Teams, DLP, information protection, auditing, and investigation of suspicious cloud activity.
Proficiency with KQL and PowerShell for security investigations, detection engineering, automation, and operational security tasks.
Experience with endpoint and device security, including Microsoft Intune, device compliance, security baselines, and access controls for managed and unmanaged devices.
Working knowledge of cloud and hybrid security architectures, with strong Microsoft Azure/Microsoft 365 expertise and familiarity with AWS or other cloud environments.
Understanding of vulnerability management, security automation, incident-response processes, and integrations between security platforms.
Ability to meet the stated physical demands: sitting; climbing or balancing; stooping, kneeling, crouching, or crawling; lifting or moving up to 10 pounds regularly and up to 25 pounds occasionally; and possessing close, distance, color, and peripheral vision, depth perception, and the capacity to adjust focus.

Nice To Haves

Python or other scripting experience is beneficial.
Familiarity with AWS or other cloud environments.

Responsibilities

Design, implement, and maintain Microsoft security controls across Entra ID, Microsoft 365, Defender, Intune, and Purview, including Conditional Access, privileged access, phishing-resistant authentication, device compliance, information protection, DLP, and secure access from managed and unmanaged devices.
Lead Microsoft identity and 365 security monitoring, investigation, and incident response involving identity compromise, suspicious authentication, phishing, token or session abuse, business email compromise, unauthorized cloud access, and potential data exfiltration.
Develop and tune detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations such as CrowdStrike and Rapid7.
Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service and workload identities, authentication methods, access reviews, and Privileged Identity Management.
Implement and operationalize Microsoft Purview Information Protection, sensitivity labels, DLP, Audit, eDiscovery, and Insider Risk capabilities.
Develop and maintain incident-response playbooks and containment procedures; conduct post-incident reviews, preserve investigative evidence, and track remediation activities with accountable owners and target dates.
Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during investigations and remediation, with clearly defined internal and vendor responsibilities.
Apply security changes through structured testing and controlled deployment, including report-only evaluation, pilot groups, exception management, validation, and rollback planning.
Mentor junior analysts and translate technical findings into actionable operational and executive reporting.
Follow the letter and spirit of the company Code of Conduct, the AdvaMed Code, the MedTech Code, and other company policies.
Comply with applicable governmental laws, rules, and regulations in the United States and internationally; complete introductory and annual training and maintain relevant compliance knowledge.
Represent the company professionally and uphold ethical business practices and socially responsible conduct in interactions with employees, customers, suppliers, and other third parties.