Summary/ObjectiveThis role focuses primarily on identity and Microsoft 365 security, while also supporting incident response, endpoint and email protection, data protection (DLP), and network security controls. The position will work closely with Infrastructure, the Support Center, and external security partners (including SOC providers) to ensure security controls are effective, scalable, and aligned with business growth.
Essential Functions- Monitors, investigates, and responds to security alerts across identity, endpoint, email, cloud, and network systems.
- Leads incident response activities, including investigation, containment, remediation, and reporting.
- Coordinates with internal teams and external SOC providers for threat monitoring and escalation.
- Maintains and improves incident response procedures, playbooks, and documentation.
- Acts as an escalation point for security-related incidents from the Support Center.
- Administers and secures Microsoft 365 and Azure / Entra ID environments.
- Designs and manages Conditional Access policies based on risk, device posture, and location.
- Configures and supports Multi-Factor Authentication (MFA), including onboarding, exception handling, and break-glass accounts.
- Monitors and responds to identity-based threats such as risky sign-ins, impossible travel, and privilege escalation.
- Supports secure access across cloud applications and services.
- Administers endpoint detection and response (EDR) solutions, including CrowdStrike.
- Manages and tunes email security platforms such as Proofpoint to reduce phishing and spam risk.
- Designs, implements, and maintains Data Loss Prevention (DLP) controls across Microsoft 365 and other platforms.
- Supports phishing simulations and security awareness initiatives across the organization.
- Supports security of Meraki-based network infrastructure, including firewalls, VPNs, and wireless access.
- Assists in implementing network segmentation and secure access controls.
- Collaborates with infrastructure teams to ensure network security standards are maintained.
- Assists with vulnerability management, risk assessments, and remediation efforts.
- Maintains documentation for security standards, procedures, and configurations.
- Provides input and guidance on security controls related to AI tools (e.g., Copilot, generative AI platforms) and associated data risks.
- Stays current on emerging threats, including AI-driven attack vectors and data exposure risks.
- Partners with internal teams and vendors to improve overall security posture.
- Performs other duties, as assigned.
Competencies- Detail Orientation.
- Communication Proficiency.
- Teamwork Orientation.
- Customer Service Orientation.
- Time Management.
Required Education, Experience, Certifications and Licensure- 3-5 years of hands-on experience in cybersecurity, security administration, or security operations.
- Strong experience securing Microsoft 365 environments, especially Conditional Access and MFA.
- Proven experience participating in or leading security incident response efforts.
- Experience working with or alongside a Security Operations Center (SOC), including alert triage, escalation, and investigation workflows.
- Hands-on experience implementing or managing Data Loss Prevention (DLP) solutions.
- Valid state issued driver's license in good standing and acceptable driving record required.
Preferred Education, Experience, Certifications and Licensure- Bachelor's degree in computer science, Information Technology, or related field preferred but not required.
Additional Eligibility Qualifications- Ability to read, write and speak English fluently. Bilingual is a plus.
- Working knowledge of AI-related security risks, including data leakage, prompt injection, or misuse of generative AI tools.
- Solid understanding of networking fundamentals. (firewalls, VLANs, VPNs, Wi-Fi security)
- Experience with endpoint, email, identity, and cloud security platforms.
- Strong analytical, troubleshooting, and documentation skills.
- Ability to work independently while collaborating across infrastructure and support teams.
- Effective and professional communication skills, with an emphasis on verbal skills.
- Fairly knowledgeable about current technology environments including, but not limited to, computer hardware, printers, networks, etc.
- Ability to manage multiple assignments at once, multi-task across projects, and effectively prioritize each.
- Ability to see potential issues and risks and communicate them to the IT Team.
- Good analytical and problem-solving abilities to identify and resolve hardware and infrastructure issues.
- Working knowledge of PC hardware.
- Knowledge of Microsoft software products.
- Experience supporting multiple locations.
- Ability to analyze and troubleshoot technical and computer-related issues.
- Ability to simultaneously handle multiple projects, prioritize tasks, and exercise good judgement.
Supervisory ResponsibilityThis position has no direct supervisory responsibilities.
Physical Demands and Work EnvironmentThe physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
- The duties associated with this position are generally performed in an indoor office setting.
- Equipment used to perform the essential function of this position includes, but is not limited to computer, fax, copier, merchant terminal, multi-line phone system, personal or Company owned vehicle.
- Employees in this role are regularly required to climb, sit, stand, bend, kneel, and frequently lift to 25 pounds.
- Employee may be required to drive a vehicle while on Company business, maintain a good driving record and be insurable under Company vehicle insurance.
- This position may also require reaching, pushing, and pulling.
- This position may also be exposed to chemicals and/ or blood borne pathogens. Exposure risk is considered: Low
Travel- This position may require up to 40 percent out of area and overnight travel.
- Travel is based in the US and Canada and may require multiple night stays and weekends.
Other DutiesPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
