Infrastructure & Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Infrastructure & Security Engineer securing Microsoft 365, Azure, and client environments for Mechanicus, a security-focused managed service provider. Leading incident response, cloud engineering, hardening, and Tier 3 escalations remotely across the US.
Responsibilities:
- Investigate phishing attacks, suspicious login activity, and account compromise incidents
- Perform threat hunting, log analysis, containment, and remediation
- Lead response efforts for Microsoft 365 and Azure-related security events
- Collaborate with security partners and vendors during active incidents
- Conduct post-incident reviews and improve prevention strategies
- Design and improve Conditional Access policies and identity security controls
- Manage and optimize Microsoft Defender and Entra ID security features
- Implement security baselines and hardening standards across client environments
- Improve MFA, privileged access, and identity governance workflows
- Support and troubleshoot Azure infrastructure and Azure Virtual Desktop environments
- Handle complex escalations involving networking, virtualization, storage, and authentication
- Lead migrations involving Microsoft 365, Azure, servers, and cloud infrastructure
- Assist with automation and infrastructure-as-code initiatives
- Serve as the Tier 3 escalation point for advanced technical issues
- Mentor junior engineers and contribute to technical standards
- Create documentation, operational runbooks, and repeatable processes
- Identify recurring problems and build long-term solutions
- Remain reachable during P1 incidents
Requirements:
- 5+ years of progressive IT experience
- At least 2 years focused on security operations
- Strong Microsoft 365 security stack experience, including Defender for Office 365, Defender for Endpoint, Defender for Identity, Entra ID Protection, and Conditional Access at scale
- Solid Azure fundamentals, including Entra ID, AVD, VNets, NSGs, Private Endpoints, and RBAC
- Familiarity with infrastructure-as-code, specifically Bicep or Terraform
- End-to-end incident response experience involving a real BEC, ransomware incident, or account takeover
- Functional PowerShell scripting skills for administrative automation, Microsoft 365/Azure modules, and script troubleshooting or modification
- Excellent written communication for incident reports, RCA documents, and client-facing summaries
- Ability to work remotely from the East Coast or Central US
- Ability to remain reachable during P1 incidents
- Nice-to-have certifications: SC-200, SC-300, or AZ-500
- Nice-to-have operational experience with Blackpoint Cyber MDR
- Nice-to-have experience with HaloPSA, NinjaOne/NinjaRMM, CIPP, Hudu, and Barracuda Email Protection
- Nice-to-have experience designing CIS- or NIST CSF-aligned baselines for SMB clients using Microsoft 365 and Azure
- Willingness to undergo a background check
Benefits:
- Annual performance bonus tied to security KPIs (mean time to detect, mean time to contain, recurring-incident reduction)
- Health insurance
- Simple IRA
- 12 days PTO to start (accrual increases with tenure)
- 8 paid holidays
- Home office stipend
- Remote flexibility
Similar Jobs
Facility Security Officer
Facility Security Officer managing personnel clearances, facility security, and compliance for AppGate's federal Zero Trust cybersecurity platform. Supporting cleared defense programs, audits, and classified information protection.
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.
Engenheiro de Segurança do Trabalho
Engenheiro de Segurança do Trabalho remoto apoiando gestão de contingência e emergências na Petrobras. Elaborando planos, painéis Power BI, treinamentos, auditorias e análises de risco de processo.
Senior Agentic AI Specialist – Integrations, Security and Continuous Evolution
Especialista sênior evoluindo a plataforma AIDA de IA agêntica para integrações corporativas seguras. Implementando RAG, controles de segurança, validações e monitoramento contínuo dos agentes.
Senior Security Engineer
Senior Security Engineer developing and securing enterprise, cloud, and infrastructure cybersecurity solutions for European public-sector clients. Automating operations, hardening systems, and resolving security issues.
Senior Security Engineer, Data Loss Prevention
Senior Security Engineer protecting Fragomen’s immigration law firm data through enterprise DLP controls. Investigating exposure risks and integrating Microsoft 365, cloud, SaaS, endpoint, and SIEM security capabilities.
Security Systems Installation
Sr. Coordinator supporting Interface Systems’ managed business security installations. Troubleshooting Access Control, CCTV/VMS, alarms, and low-voltage systems for field technicians.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, network, and wireless systems. Interface Systems delivers managed security, network, UCaaS, and business intelligence solutions.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, access control, and network systems. Interface Systems delivers managed security, connectivity, and IT solutions to distributed enterprises.
Business Information Security Lead
Business Information Security Lead securing US Foods’ digital foodservice technology ecosystem. Managing cybersecurity risks, compliance, assessments, and remediation across DigiTech value streams.