Cybersecurity Engineer

This remote, direct-hire Cybersecurity Engineer position with System One centers on protecting enterprise infrastructure, coordinating threat response, and securing Microsoft 365 environments within regulatory compliance obligations.

Responsibilities

• Protect enterprise infrastructure, respond to cyber threats, administer Microsoft 365 security, and support regulatory compliance obligations.
• Design, implement, and maintain security controls across cloud and on-premises environments.
• Oversee security compliance efforts and contribute to security policy development.
• Monitor security alerts, incidents, phishing attempts, malware, and suspicious activity, with timely response.
• Conduct vulnerability assessments, track remediation, and strengthen security hardening.
• Manage endpoint protection, email security, MFA, Conditional Access, and identity security controls.
• Configure and operate SIEM, logging, and monitoring platforms.
• Engage in threat hunting and proactive security reviews.
• Microsoft 365 and Cloud Security: administer Microsoft 365 security tools including Defender, Entra ID (Azure AD), Conditional Access, Intune, Purview, and Exchange Online Protection.
• Implement data loss prevention, retention, and email security policies.
• Secure remote access, mobile devices, and hybrid cloud infrastructure.
• Harden firewalls, VPNs, wireless networks, switches, and servers; review firewall rules and network segmentation.
• Support backup, disaster recovery, and business continuity initiatives.
• Assist with patch management and establishing secure configuration baselines.
• Provide escalation support for security-related help desk issues.
• Lead incident response efforts during security events and outages.
• Deliver user security awareness training and phishing simulations.

Requirements

• Must-have domain experience: ideally with HUD or similar state or municipal housing programs, or civilian US federal agencies outside defense/intelligence, or similar state agencies, or experience in highly regulated industries such as insurance, banking, or healthcare.
• Experience implementing security controls and solutions from scratch, with a solid working knowledge of security best practices and the ability to decide what to implement and how to execute it.
• At least five years of hands-on IT security or cybersecurity engineering experience.
• Strong experience with Microsoft 365 security technologies specifically.
• Experience with firewalls and VPN technologies, Endpoint Detection & Response (EDR), email security platforms, vulnerability management tools, Windows Server and Hybrid Active Directory, and knowledge of cybersecurity frameworks and compliance standards.

Technologies

• Microsoft Defender
• Entra ID (Azure AD)
• Conditional Access
• Intune
• Purview
• Exchange Online Protection
• Microsoft 365 security technologies
• SIEM
• Endpoint Detection & Response (EDR)
• Windows Server
• Hybrid Active Directory

Benefits

• Full benefits