Security Engineer

MadCap Software develops software solutions for content creation, collaboration, publishing, management, and analytics and reporting. The Security Engineer will secure SaaS platforms, cloud infrastructure, endpoints, and enterprise systems by managing security controls, vulnerability remediation, threat monitoring, incident response, and security partnerships across IT, DevOps, and Development teams.

Responsibilities:

• Design, implement, and manage a multi-platform SIEM, including threat detection rules, dashboards, and runbooks in collaboration with IT, DevOps, and Development teams
• Own the enterprise vulnerability management program. Track, prioritize, report, and drive remediation of vulnerabilities across AWS, Azure, Microsoft 365, Windows, Linux, network infrastructure, and SaaS platforms
• Enforce Zero Trust security principles for the remote workforce using Intune, Conditional Access, and EDR technologies
• Implement and maintain SOAR playbooks, automate incident response, and integrate security tools for faster remediation
• Monitor and respond to alerts in Microsoft 365 Defender, CrowdStrike, and other security platforms; lead incident investigations
• Secure Microsoft 365, AWS, Azure, and CoLo environments, including WAF and firewall configurations
• Proactively identify, assess, document, and remediate security risks and architectural vulnerabilities across SaaS, cloud, and enterprise environments
• Conduct risk assessments, security audits, penetration testing activities, and vulnerability assessments to identify weaknesses and enforce security standards
• Assist in responding to customer and vendor security questionnaires, RFIs, and compliance requests as needed
• Work closely with Development teams to integrate security throughout the SDLC and maintain application security and code scanning tools
• Keep up to date with the latest security technologies, standards, authentication protocols, and threats to ensure the company's defenses remain effective
• Work with third-party managed security service providers on remediation and security improvement initiatives
• Train staff on security awareness and cybersecurity best practices
• Collaborate with the Security & Compliance Manager, IT, DevOps, Developers, and other departments to align security initiatives with business objectives
• Create and maintain security documentation, policies, procedures, standards, and runbooks

Requirements:

• • Strong understanding of vulnerability management , risk management, incident response, access controls, and security governance
• • 5+ years of experience in a Security Engineer or similar cybersecurity role
• • Experience securing SaaS platforms and cloud environments (AWS and Azure)
• • Experience with SOC 2, ISO 27001, FedRAMP, or similar compliance frameworks
• • Experience with SIEM, EDR/XDR, SOAR, and vulnerability management platforms
• • Knowledge of firewalls, VPNs, IDS/IPS, WAFs, and network security technologies
• • Experience with Microsoft 365 Defender, CrowdStrike, Microsoft Sentinel, or similar security platforms
• • Scripting and automation experience with PowerShell, Python, or similar languages
• • Strong knowledge of Windows and Linux operating systems
• • Excellent analytical, problem-solving, and communication skills
• • Ability to work independently and manage multiple priorities
• • Professional security certification preferred (CISSP, CISM, GIAC, CCSP, or equivalent)