Security Operations Engineer

The Security Operations Engineers will work to strengthen the organization’s cybersecurity posture. This role will design, implement, and maintain security controls across cloud, endpoint, identity, and collaboration platforms while leading security monitoring, incident response, vulnerability management, identity governance, endpoint security, automation, and user awareness initiatives. The ideal candidate has expertise in Microsoft security technologies, Azure, Entra ID, Intune, Arctic Wolf, NinjaOne, Proofpoint, Microsoft 365, Zero Trust, PAM, PowerShell, AI tools, and automation technologies.

Essential Functions:

Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.

1. Monitors, investigates, and responds to cybersecurity alerts generated by Arctic Wolf, Microsoft security platforms, Proofpoint, and other monitoring tools.
2. Participate in security incident response activities, including containment, eradication, recovery, and root cause analysis.
3. Administers and secures Microsoft Entra ID (Azure Active Directory) environments.
4. Implements and maintains Conditional Access, Multifactor Authentication (MFA), Identity Protection, and Identity Governance controls.
5. Monitors privileged account activity and ensures compliance with Zero Trust principles.
6. Manages Microsoft Intune for Windows, macOS, iOS, and Android device enrollment and security compliance.
7. Utilizes NinjaOne for endpoint monitoring, remote management, patching, and asset administration.
8. Secure and administers Microsoft Office 365 including Exchange Online, SharePoint Online, OneDrive for Business and Microsoft Teams. Administers Proofpoint email security solutions.
9. Supports Microsoft Global Secure Access (GSA) implementation and troubleshooting.
10. Implements Microsoft security best practices across cloud applications and services.
11. Implements security controls for Azure subscriptions, virtual networks, storage accounts, and cloud workloads.
12. Investigates phishing attempts, malicious emails, spoofing attacks, and business email compromise (BEC) incidents.
13. Administers and support ZenGuide Security Awareness Training programs.
14. Develop security awareness metrics and executive reporting.
15. Assists with security audits, risk assessments, and compliance initiatives.
16. Develops PowerShell scripts to automate security, user administration, and compliance processes.
17. Utilizes ChatGPT, Microsoft Copilot, and AI-driven technologies to improve operational efficiency, documentation, and incident investigations.
18. Tracks remediation metrics and security improvements. Performs security reviews and recommend corrective actions.

Competencies:

1. Strong analytical and problem-solving skills
2. Excellent verbal and written communication
3. Ability to manage multiple priorities and incidents simultaneously
4. Strong documentation and process development skills
5. Customer-service mindset
6. Continuous learning and security-first mentality
7. Ability to leverage AI and automation responsibly to increase efficiency and security effectiveness

Required Skills / Abilities:

1. Experience with supporting enterprise Microsoft environments.
2. Experience with security platforms (Arctic Wolf, Proofpoint, NinjaOne, SIEM tool, and EDR technologies.
3. Experience with Privileged Access Management (PAM) a plus
4. PowerShell scripting, API integrations, and AI-assisted administration
5. Interact effectively with people at all levels of the organization.

Supervisory Responsibility:

This position has no direct supervisory responsibilities. At times, due to projects or work assignments, employee will need to coordinate and direct a team to meet/satisfy individual/company objectives.

Work Environment:

This position operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, and filing cabinets. At times, employee might be exposed to manufacturing environment, including forklift traffic, fumes, noise, and operating manufacturing equipment.

Physical Demands:

1. Prolonged periods of sitting at a desk and working on a computer.
2. Must be able to lift up to 15 pounds at times.

Position Type and Expected Hours of Work:

This is a full-time on-site position. May become hybrid in the future. Days and hours of work are Monday through Friday, 8:00AM to 5:00PM. To meet our customer demands and internal objectives, at times this role will be required to work outside of the normal schedule, including weekends.

Travel:

There may be occasional local day travel or overnight travel as it relates to training activities or support of assigned plants/locations.

Required Education and Experience:

1. Bachelor's degree in in Computer Science or IT related field, or equivalent work experience and/or education.
2. 5 years of experience in cybersecurity, security operations, systems administration, or cloud security.
3. Experience supporting enterprise Microsoft environments.

Preferred Education and Experience:

1. Microsoft Certified: Cybersecurity Architect Expert
2. Microsoft Certified: Security Operations Analyst Associate (SC-200)
3. Microsoft Certified: Identity and Access Administrator Associate (SC-300)
4. Microsoft Certified: Azure Security Engineer Associate (AZ-500)
5. CompTIA Security
6. CompTIA CySA

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. Other job duties and responsibilities may also be assigned by the incumbent’s manager at any time based upon Company need.

OTR Engineered Solutions is an equal opportunity employer and will not tolerate discrimination in employment on the basis of race, color, age, sex, sexual orientation, gender identity or expression, religion, disability, ethnicity, national origin, marital status, veteran status, genetic information or any other legally protected classification or status.