Security Systems Engineer

The Security Systems Engineer is a key member of Scoular’s Security Risk Management team and is responsible for hands-on execution of core cybersecurity operations. This role focuses on SIEM management, endpoint protection, vulnerability management, incident response, email monitoring, and Tier 1 security support across Scoular’s enterprise environment. The analyst assists with onboarding log sources, tuning alerts, monitoring security events, performing initial investigations, supporting remediation activities, and other project work.

The Security Systems Analyst partners closely with Infrastructure and IT Operations teams to ensure secure operation of systems across on-premise and cloud environments. The role reports to the Lead Security Engineer and requires strong technical skills, attention to detail, excellent documentation habits, and the ability to collaborate effectively while continuously learning.

This position can be located in Scoular's Omaha, NE or Overland Park, KS offices.

Job Functions

Security Operations & Monitoring

• Monitor SIEM dashboards and alerts to detect suspicious activity and respond to incidents following established playbooks.
• Perform Tier 1–level incident triage and escalate to senior team members as needed.
• Assist with onboarding log sources, validating data quality, and tuning SIEM alerts and dashboards.
• Support endpoint protection technologies (EDR/XDR) including Defender and CrowdStrike.
• Monitor and manage Microsoft email quarantine.

Vulnerability Management

• Perform routine vulnerability scans, validate results, track remediation progress, and coordinate with system owners.
• Document findings, maintain dashboards, and assist in prioritizing remediation efforts based on risk.

Security Tooling & Automation

• Support operational management of SIEM platforms (Sentinel, CrowdStrike ) including basic configuration and alert refinement.
• Use PowerShell and/or Python to automate routine tasks, improve efficiency, and support data analysis.

Identity & Access Security

• Assist in maintaining secure access controls using Entra ID / Azure AD and related IAM tools.
• Support enforcement of least‑privilege standards and monitor identity‑related security events.

Network Security & Troubleshooting

• Assist Infrastructure team with basic troubleshooting related to firewalls, IDS/IPS, VPN, and secure network design.
• Monitor network traffic and alerts for indicators of compromise.

Cloud Security (Azure)

• Help review configuration of cloud resources for security compliance.
• Assist in monitoring cloud logs and security insights via Azure and SIEM tools.

Policy, Compliance & Documentation

• Contribute to security policies, standards, procedures, and knowledgebase documentation.
• Participate in internal reviews aligned with frameworks such as NIST CSF, CIS, ISO Controls, or ITIL.
• Maintain precise documentation for incidents, investigations, and system changes.

Architecture & Project Participation

• Participate in security reviews of new systems or architecture changes with guidance from senior team members.
• Support security projects including tool deployments, enhancements, and operational improvements.
• Coordinate with vendors, support POCs, and assist with testing new security technologies.

Cross‑Team Collaboration

• Work daily with Infrastructure, Service Desk, and other IT teams to investigate issues and implement security recommendations.
• Provide clear communication to business units and end users when security remediation or follow-up is needed.
• Actively contribute to a collaborative, learning-focused team culture.

Qualifications:

• 2–5 years experience in cybersecurity, IT operations, or technical security support.
• Hands-on experience with SIEM platforms (Sentinel, CrowdStrike, Splunk, QRadar, LogRhythm, or similar).
• Experience with endpoint security tools (Defender, CrowdStrike, or equivalent).
• Familiarity with Entra ID/Azure AD and identity security concepts.
• Basic understanding of:
  • Vulnerability scanning tools
  • Firewalls, IDS/IPS, and network protocols (TCP/IP, OSI model)
  • Cloud environments, particularly Azure
• Ability to write or read basic PowerShell or Python scripts.
• Strong documentation, communication, and teamwork skills.
• Ability to take direction, learn new technologies, and adapt to changing security needs.

Preferred Experience

• Bachelor’s degree in cybersecurity, computer science, information systems, or related experience.
• Security , CySA , AZ-500, GSEC, or similar certification.
• Exposure to security standards such as NIST CSF, CIS Controls, ISO27001 or ITIL.
• Experience supporting security reviews or participating in architecture discussions.
• Experience with enterprise EDR/XDR platforms.
• Basic understanding of secure cloud architecture principles.