Bachelor's degree in Cybersecurity, IT, Computer Science, or related field, or equivalent experience.
5+ years in cybersecurity, information security, or systems engineering.
Hands-on experience with cybersecurity alerts and incident response.
Experience with enterprise security technologies like EDR, SIEM, and vulnerability management.
Familiarity with cybersecurity frameworks such as CMMC and NIST SP 800-171.
Strong technical troubleshooting and analytical skills.
Excellent documentation and communication skills.
Responsibilities
Monitor security systems and respond to incidents daily.
Investigate security events using various telemetry sources.
Coordinate with IT teams and third-party providers during incidents.
Identify root causes of incidents and recommend improvements.
Implement and maintain security platforms and controls.
Conduct vulnerability management activities and track remediation.
Develop and maintain security documentation and processes.
Benefits
Opportunities for professional development and training.
Collaborative work environment with cross-functional teams.
Engagement in continuous improvement activities.
Support for certifications and further education.
Flexible work hours for incident response and critical activities.
Full Job Description
ABOUT THE JOB
The Tepa Companies are seeking an Information Security Engineer to support the protection of Tepa's information systems and digital assets through security operations, incident response, vulnerability management, and security engineering activities. This role serves as a technical responder for cybersecurity incidents and performs investigation, containment, remediation, and follow-up activities across Tepa's Commercial and regulated environments.
Job Functions:
Performs day-to-day security monitoring and incident response activities, including alert triage, investigation, containment, remediation, recovery, and documentation.
Investigates security events and incidents using available endpoint, identity, network, cloud, SIEM, and other security telemetry.
Coordinates with internal IT teams and third-party security providers during investigation and remediation of cybersecurity incidents.
Identifies root causes and contributing factors following security incidents and recommends technical or procedural improvements to reduce recurrence.
Implements, configures, administers, and maintains security platforms and controls supporting endpoint, identity, cloud, network, vulnerability management, and security monitoring.
Performs vulnerability management activities, including vulnerability review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.
Assists with security hardening and configuration management using established security baselines and guidance, including CIS Benchmarks, STIGs, and vendor security recommendations.
Supports security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
Develops and maintains security processes, standards, procedures, work instructions, diagrams, and other technical documentation.
Maintains documentation supporting Tepa's Commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
Supports implementation and ongoing operation of security requirements associated with CMMC, NIST SP 800-171, and other applicable security and compliance frameworks.
Collects and maintains technical evidence supporting security assessments, audits, control validation, and compliance activities.
Collaborates with Infrastructure, Cloud, End User Services, GRC, and other business stakeholders to incorporate security requirements into operational processes and technical solutions.
Assists with testing and validation of security controls and identifies opportunities to improve security effectiveness, automation, and operational maturity.
Participates in incident response exercises, security assessments, and continuous improvement activities.
Communicates security findings, risks, remediation requirements, and technical recommendations to both technical and non-technical stakeholders.
Available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.
WHAT WE'RE LOOKING FOR
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or equivalent combination of education, training, and relevant professional experience.
5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.
Hands-on experience investigating and responding to cybersecurity alerts and incidents.
Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR), SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
Experience supporting vulnerability identification, remediation, and security hardening activities.
Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.
Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
Strong technical troubleshooting and analytical skills with the ability to independently investigate security events and determine appropriate remediation actions.
Working knowledge of cloud, endpoint, network, identity, and application security concepts.
Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
Strong documentation skills with attention to accuracy, completeness, and auditability.
Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions.
Strong written and oral communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences.
Strong collaboration skills and the ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.
Preferred Experience (not required)
Experience securing Microsoft Azure and Microsoft 365 environments.
Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
Experience with Microsoft Government Community Cloud High (GCC High) environments.
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
GCIH, Security+, CySA+, CISSP, or similar security certifications.
Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
Other relevant incident response, cloud security, or cybersecurity engineering certifications.
