Cybersecurity Engineer – Infrastructure, Cloud

Role Overview

• Configure and maintain security systems such as firewalls, network security tools, and intrusion detection systems.
• Help ensure servers, networks, and cloud systems are configured securely.
• Support Cisco security tools including FirePower firewalls and Meraki SD-WAN environments.
• Work with IT teams to fix security risks found in infrastructure systems.
• Manage endpoint security tools such as Microsoft Defender for Endpoint, Cisco AMP.
• Monitor alerts from laptops, servers, and other devices.
• Investigate suspicious activity on company devices and respond when threats are detected.
• Isolate or remediate compromised systems when necessary.
• Work with the 24-hour Security Operations Center to review and investigate security alerts.
• Analyze system logs and security events to detect possible threats.
• Help improve alert rules to reduce false alarms and improve threat detection.
• Monitor the security of Azure cloud systems using tools such as Microsoft Defender for Cloud.
• Identify security risks or misconfigurations in cloud environments.
• Work with the cloud administration team to fix security issues.
• Monitor alerts and suspicious login activity related to Microsoft Entra ID accounts.
• Investigate unusual sign-ins, risky logins, or possible credential misuse.
• Recommend improvements to strengthen identity security based on observed activity.
• Run vulnerability scans across servers, devices, and cloud systems.
• Help investigate and respond to security incidents.
• Assist with containment and recovery when systems are compromised.
• Document incidents and help identify ways to prevent similar issues in the future.
• Help ensure systems follow company security policies and industry best practices.
• Partner with the vCISO to support ISO 27001 certification efforts and ongoing compliance maintenance.
• Maintain documentation of security processes and configurations.
• Provide guidance to employees and IT teams on security best practices.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 5+ years of experience in cybersecurity, network security, or system security roles.
• Relevant certifications such as Security+, CISSP, CISM, CEH, or equivalent.
• DoD IAT Level II certification or ability to obtain.
• Experience with Microsoft security tools: Defender for Endpoint, Defender for Cloud, Defender for Office 365, and Entra ID security monitoring.
• Experience with Abnormal AI Email Security a plus.
• Experience analyzing security alerts and logs using SIEM platforms.
• Hands-on experience with Cisco security technologies including FirePower, IDS/IPS, Cisco AMP, Cisco Umbrella, Cisco Secure Cloud Analytics, and Cisco XDR.
• Familiarity with Meraki SD-WAN and enterprise WiFi environments.
• Understanding of networking concepts such as TCP/IP, VPNs, VLANs, routing, switching, and SD-WAN.
• Working knowledge of Zscaler zero-trust is a plus.
• Experience with vulnerability scanning and remediation processes.

Tech Stack

• Azure
• Cloud
• Cyber Security
• Firewalls
• Switching
• TCP/IP