Security Engineer (EST/EDT working hours)

The Role The Security Engineer starts primarily in managed detection and response (MDR). On a normal day, the focus is detecting, investigating, and responding to security events. When project work requires additional engineering capacity, the engineer may be moved to support project work.

When a significant cybersecurity incident occurs - whether for a client or internally - incident response becomes the priority and the broader security team participates as needed, regardless of normal schedules. What You Will Do Investigate security alerts and events and determine whether activity is benign, suspicious, or requires escalation. Participate in detection and response operations, including guided containment and remediation decisions.

Analyze security issues and recommend remediation or configuration changes; early in the role, changes are performed under guidance rather than independently. Work with logs and telemetry from endpoints, operating systems, networks, identity systems, cloud environments, and security platforms. Participate in client and internal cybersecurity incidents as part of the incident response team.

Contribute to cybersecurity projects when assigned, learning the required technology as part of the project. Analyze internal and client security environments and make practical security recommendations under guidance. Grow into broader engineering responsibilities as your technical capability and interests develop.

Core Technical Foundation We do not expect on