Senior Information Security Engineer

Globus Medical•Audubon, PA

About The Position

Globus Medical is seeking a Senior Information Security Engineer specializing in Microsoft security, identity protection, cloud threat detection, data protection, and incident response. The engineer will design, implement, and operationalize security controls across Microsoft 365, Microsoft Entra, Azure, Intune, Defender, and Purview, and integrate Microsoft security telemetry with the broader security ecosystem, including CrowdStrike and Rapid7. The role leads complex identity and cloud-security investigations, develops and tunes detection and response capabilities, strengthens privileged-access and managed-device controls, and helps prevent unauthorized access and data exfiltration from enterprise services. It also establishes repeatable playbooks, supports post-incident remediation, mentors junior analysts, and translates technical findings into operational and executive reporting. The position involves collaboration with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers. Security changes are tested and deployed in a controlled manner to balance security improvement with business continuity. The employee must follow company and industry codes and policies, comply with applicable laws and regulations, and represent the company professionally and ethically. Reasonable accommodations may be made for individuals with disabilities to perform essential functions. Duties may change at any time.

Requirements

Bachelor’s degree in Information Security or a related field.
Microsoft Certified: Azure Security Engineer Associate, or equivalent Microsoft security operations, identity, or information-protection certification or hands-on experience.
Advanced proficiency with SIEM, EDR, SOAR, and vulnerability management tools.
Strong scripting skills in Python, PowerShell, or Bash.
Deep understanding of cloud security, including AWS, Azure, and GCP.
Familiarity with DevSecOps and CI/CD security integration.
Experience with Zero Trust architecture and identity management.
Strong identity and access security knowledge, including MFA and phishing-resistant authentication, privileged access, identity protection, Active Directory, and hybrid identity environments.
Experience with security monitoring, threat detection, incident response, and threat hunting, including SIEM/XDR technologies and platforms such as Microsoft Defender, CrowdStrike Falcon, and Rapid7.
Experience protecting Microsoft 365 data and cloud services, including Exchange Online, SharePoint, OneDrive, Teams, DLP, information protection, auditing, and investigation of suspicious cloud activity.
Proficiency with KQL and PowerShell for security investigations, detection engineering, automation, and operational security tasks.
Experience with endpoint and device security, including Microsoft Intune, device compliance, security baselines, and access controls for managed and unmanaged devices.
Working knowledge of cloud and hybrid security architectures, with strong Microsoft Azure/Microsoft 365 expertise and familiarity with AWS or other cloud environments.
Understanding of vulnerability management, security automation, incident-response processes, and integration between security platforms.
Ability to meet the stated physical demands: sitting; climbing or balancing; stooping, kneeling, crouching, or crawling; lifting or moving up to 10 pounds regularly and up to 25 pounds occasionally; and possessing close, distance, color, and peripheral vision, depth perception, and ability to adjust focus.

Nice To Haves

Python or other scripting experience is beneficial.
Familiarity with AWS or other cloud environments.

Responsibilities

Design, implement, and maintain Microsoft security controls across Entra ID, Microsoft 365, Defender, Intune, and Purview, including Conditional Access, privileged access, phishing-resistant authentication, device compliance, information protection, DLP, and secure access from managed and unmanaged devices.
Lead identity and Microsoft 365 security monitoring, investigation, and incident response, including investigations into identity compromise, suspicious authentication, phishing, token or session abuse, business email compromise, unauthorized cloud access, and potential data exfiltration.
Develop and tune security detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations such as CrowdStrike and Rapid7.
Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service and workload identities, authentication methods, access reviews, and Privileged Identity Management.
Implement and operationalize Microsoft Purview data-security capabilities, including Information Protection, sensitivity labels, DLP, Audit, eDiscovery, and Insider Risk.
Develop and maintain incident-response playbooks and containment procedures; conduct post-incident reviews; preserve investigative evidence; and track remediation activities with accountable owners and target dates.
Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during security investigations and remediation, with clearly defined internal and vendor responsibilities.
Apply security changes through structured testing and controlled deployment, including report-only evaluation, pilot groups, exception management, validation, and rollback planning.
Mentor junior analysts and translate technical findings into actionable operational and executive reporting.
Follow the company Code of Conduct, AdvaMed Code, MedTech Code, and other company policies; complete required compliance training and maintain knowledge of applicable requirements.
Represent the company professionally and uphold ethical business practices and socially responsible conduct in interactions with employees, customers, suppliers, and other third parties.