Cybersecurity Engineer

System One is seeking a Cybersecurity Engineer to strengthen its enterprise security posture and lead threat response efforts on-site in Pittsburgh, PA. The role spans cloud and on-premises environments, with responsibilities that include administering Microsoft 365 security, monitoring threats, and ensuring regulatory compliance across the organization. The selected candidate will implement and maintain security controls while guiding incident response and continuous security improvements.

Responsibilities

• Secure enterprise infrastructure, respond to cyber threats, administer Microsoft 365 security, and help ensure regulatory compliance across cloud and on-premises environments.
• Implement and maintain enterprise security controls across cloud and on-premises environments.
• Manage security compliance and contribute to security policy development.
• Monitor and respond to security alerts, incidents, phishing attempts, malware, and suspicious activity.
• Conduct vulnerability assessments, track remediation, and perform security hardening.
• Manage endpoint protection systems, email security, MFA, Conditional Access, and identity security controls.
• Configure and maintain SIEM, logging, and monitoring platforms.
• Conduct threat hunting and proactive security reviews.
• Administer Microsoft 365 and cloud security tools including Defender, Entra ID (Azure AD), Conditional Access, Intune, Purview, and Exchange Online Protection.
• Implement data loss prevention, retention policies, and email security controls.
• Secure remote access, mobile devices, and hybrid cloud infrastructure.
• Secure firewalls, VPNs, wireless networks, switches, and servers.
• Review firewall rules and network segmentation to strengthen security boundaries.
• Support backup, disaster recovery, and business continuity initiatives.
• Assist with patch management and establishing secure configuration baselines.
• Provide escalation support for security-related help desk issues.
• Lead response efforts during security incidents and outages.
• Conduct user security awareness training and phishing simulations.

Requirements

• Must-have domain experience: ideally HUD or similar state or municipal agencies involved in public housing programs; or experience with civilian US federal agencies outside defense/intelligence/national security, or with regulated industries such as insurance, banking, or healthcare.
• Experience implementing security controls and solutions from scratch, with working knowledge of security best practices and the ability to plan and execute effectively.
• At least 5+ years of hands-on IT security / cybersecurity engineering experience.
• Strong experience with Microsoft 365 security technologies.
• Experience with firewalls and VPN technologies.
• Endpoint Detection & Response (EDR).
• Email security platforms.
• Vulnerability management tools.
• Windows Server and Hybrid Active Directory.
• Knowledge of cybersecurity frameworks and compliance standards.

Technologies

• Microsoft Defender
• Entra ID (Azure AD)
• Conditional Access
• Intune
• Purview
• Exchange Online Protection
• SIEM
• Data Loss Prevention (DLP)
• Windows Server
• Hybrid Active Directory
• Firewalls
• VPN technologies
• Endpoint Detection & Response (EDR)
• Email security platforms
• Vulnerability management tools
• Microsoft 365 security tools

Benefits

• Full benefits