Cybersecurity Engineer

Join Phoenix Investors in Milwaukee, onsite, and access a comprehensive benefits package designed to support your cybersecurity career. You will receive a 401(k) with employer match, medical, dental, and vision insurance, paid time off, holidays, company-paid parking, and company-paid breakfast and lunch. This hands-on Cybersecurity Engineer role operates and improves security controls across the environment under the technical direction of the Senior Network and Security Administrator.

Responsibilities

• Monitor security logs and alerts across SIEM and Microsoft Defender (XDR); investigate, triage, and respond to potential incidents.
• Operate and help tune endpoint/EDR coverage (Microsoft Defender, CrowdStrike) and assist with firewall, IDS/IPS, and edge controls (Fortinet) under senior direction.
• Run vulnerability scanning, patch/remediation tracking, and alert tuning to reduce false positives while preserving detection coverage.
• Help administer Microsoft Entra identity and access, including conditional access, MFA, identity protection, and least-privilege roles, applying Zero Trust principles.
• Maintain Microsoft 365 security and compliance configuration across Exchange Online, SharePoint/OneDrive, and Teams, keeping settings hardened and consistent.
• Build, deploy, and tune data loss prevention, sensitivity labeling, encryption, and insider-risk controls in Microsoft Purview across email, endpoints, and cloud.
• Prevent data loss through unsanctioned Shadow AI, enabling approved AI services such as Microsoft 365 Copilot to be used safely and productively.
• Help maintain compliance with frameworks and regulations such as ISO 27001, NIST, SOC 2, and GDPR where applicable.
• Perform risk and control-maturity assessments, track remediation, and support third-party or partner risk reviews; provide audit-ready evidence.
• Support investigation, containment, and recovery during security incidents under the direction of the senior owner.
• Help maintain incident response runbooks and tabletop exercises, contributing to business continuity and disaster recovery readiness.

Requirements

• Bachelor’s degree in information security, IT, or computer science, or equivalent experience.
• 3 to 5+ years in cybersecurity roles.
• Hands-on experience with security tooling such as SIEM, endpoint/EDR, IDS/IPS, and firewalls, DLP, antivirus, and vulnerability scanners.
• Working knowledge of the Microsoft security stack (Defender XDR, Purview) and Microsoft Entra / Microsoft 365 administration and security.
• Experience supporting incident response and compliance with frameworks such as ISO 27001, NIST, or SOC 2.
• Strong problem-solving and communication skills, with comfort taking technical direction while owning execution and quality.
• A practical, business-minded approach that balances risk reduction with cost and operational impact.

Technologies

• SIEM
• Microsoft Defender (XDR)
• CrowdStrike
• Fortinet
• Microsoft Entra
• Microsoft Purview
• Microsoft 365, including Exchange Online, SharePoint/OneDrive, and Teams
• Microsoft 365 Copilot

Benefits

• 401(k) with employer match
• Medical, dental, and vision insurance
• Paid time off
• Holidays
• Company-paid parking
• Company-paid breakfast and lunch