Job Title: Senior Security Engineer

Location: Salt Lake Valley, UT

Status: FTE

Job Number: 16269

Work Model: Onsite

Allows Relocation: No

No C2C

Job Description:

Our client is looking for a highly skilled Senior Security Engineer to lead the design, implementation, and operation of cybersecurity technologies that protect our enterprise, customer-facing systems, and mission-critical data center environments. This position serves as the technical cybersecurity lead and works closely with IT, Networking, Physical Security, Compliance, and leadership to define scope and prioritization. The ideal candidate combines strong engineering expertise with operational security experience and thrives in a fast-paced, highly available infrastructure environment.

Responsibilities:

Security Engineering

• Design, implement, and maintain enterprise security technologies
• Lead deployment and management of:
• Microsoft Defender XDR
• Microsoft Entra ID security
• Privileged Identity Management (PIM)
• Conditional Access
• Defender for Cloud
• Defender for Endpoint
• Email Security
• Vulnerability Management platforms
• Engineer secure cloud and hybrid infrastructure across Microsoft 365 and AWS
• Develop security standards and hardening baselines 

Security Operations

• Lead incident response activities
• Investigate security alerts and indicators of compromise
• Perform threat hunting activities
• Conduct forensic investigations when required
• Coordinate response to cybersecurity incidents

Risk & Compliance

Support and maintain compliance with:

• HITRUST
• SOC 2
• ISO 27001
• PCI DSS
• HIPAA
• Internal security audits

Develop security documentation including:

• Policies
• Standards
• Procedures
• Technical runbooks

Vulnerability Management

• Manage enterprise vulnerability scanning
• Prioritize remediation activities
• Coordinate patch management with infrastructure teams
• Track remediation metrics

Identity & Access Management

• Manage privileged access
• Review permissions and access controls
• Implement Zero Trust principles
• Support identity lifecycle processes

Security Architecture

• Participate in infrastructure design reviews
• Evaluate new technologies
• Perform security risk assessments
• Recommend security improvements

Leadership

• Mentor junior security staff
• Provide technical guidance
• Evangelize strong security practices
• Participate in after-hours incident response
• Support cybersecurity roadmap initiatives

Required Skills:

• Bachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience)
• 7+ years of cybersecurity experience
• 5+ years of security engineering experience
• Experience administering Microsoft security technologies
• Experience with SIEM, EDR, IAM, and vulnerability management platforms
• Strong understanding of:
• Networking
• Active Directory
• Microsoft 365
• Windows Server
• Linux
• Firewalls
• DNS
• VPN
• Zero Trust Architecture

Preferred Qualifications

One or more of:

• CISSP
• GIAC certifications
• GSEC
• GCIA
• GCIH
• Azure Security Engineer
• Microsoft Security certifications

Experience with:

• ServiceNow
• PowerShell
• Python
• Infrastructure as Code
• SIEM/SOAR platforms
• Vulnerability & Patch management
• Operational Technologies
• Data center operations

Core Competencies

• Security Architecture
• Incident Response
• Threat Detection
• Security Engineering
• Risk Management
• Communication
• Project Leadership
• Continuous Improvement

Benefits:

• Comprehensive health, dental, and vision insurance
• 401k with company match
• PTO

 Pre-Employment & Client Submission Requirements

Employment and/or client submission is contingent upon successful completion of required pre-employment screening and verification processes. These requirements include:

• Background check: Candidates must successfully complete the required background screening in accordance with company policy and applicable law.
• Drug screening: Candidates must successfully complete the required drug screening in accordance with company policy, applicable client requirements, and applicable law.
• Identity and location verification: Candidates may be required to complete identity and/or location verification using a secure verification tool prior to client submission.
• Employment eligibility: Candidates must provide appropriate documentation to verify employment eligibility as required by law.
• Qualification verification: Information provided during the application and recruiting process, including employment history, education, certifications, licenses, and professional references, may be verified as applicable.
• Additional client requirements: Additional screening, documentation, or verification may be required based on the client, position, work location, or applicable requirements.

All screening and verification activities will be conducted in accordance with applicable company policies, client requirements, and federal, state, and local laws.

For additional job openings see our website:

https://smithjohnson.com/open-jobs/

Follow Us: