*** This is a direct hire role

*** NO C2C candidates, NO 3rd parties

Cybersecurity Engineer :

- This role is responsible for securing enterprise infrastructure, responding to cyber threats, administering Microsoft 365 security, and helping ensure compliance with applicable regulatory requirements.
- Implement, and maintain enterprise security controls across cloud and on-premises environments.
- Manage security compliance and assist in security policy creation
- Monitor and respond to security alerts, incidents, phishing attempts, malware, and suspicious activity.
- Perform vulnerability assessments, remediation tracking, and security hardening.
- Manage endpoint protection systems, email security, MFA, Conditional Access, and identity security controls.
- Configure and maintain SIEM, logging, and monitoring platforms.
- Conduct threat hunting and proactive security reviews.
- Microsoft 365 and Cloud Security : Administer Microsoft 365 security tools including Microsoft Defender , Entra ID (Azure AD) , Conditional Access, Intune, Purview, Exchange Online Protection
- Implement DLP, retention, and email security policies.
- Secure remote access, mobile devices, and hybrid cloud infrastructure.
- Secure Firewalls, VPNs, wireless networks, switches, and servers.
- Review Firewall rules and network segmentation.
- Support backup, disaster recovery, and business continuity initiatives.
- Assist with patch management and secure configuration baselines.
- Provide escalation support for security-related help desk issues.
- Lead response efforts during security incidents and outages.
- Conduct user security awareness training and phishing simulations.

Required Qualifications :

- Experience implementing security controls and solutions from scratch - not just maintaining or monitoring established systems - with a working knowledge of security best practices and the ability to determine what to implement and how to execute it effectively.
- At least 5+ years of hands-on IT security / cybersecurity engineering experience.
- Strong experience with Microsoft 365 security technologies specifically.
- Experience with: Firewalls and VPN technologies, Endpoint Detection & Response (EDR), Email security platforms, Vulnerability management tools, Windows Server and Hybrid Active Directory, Knowledge of cybersecurity frameworks and compliance standards.

Preferred Qualifications :

- Certifications such as: CISSP, Security+ , SC-200, SC-300, AZ-500, CEH

.

#LI-DP1

#M1

Ref: #404-IT Pittsburgh