The IT Security Engineer (HR Title = Technology Infrastructure Engineer - Security) is a core practitioner within the security team, responsible for the day-to-day work that keeps the enterprise protected. This role spans incident response, identity and access management, hardware and software risk assessment, and threat and vulnerability management — requiring technical depth, the ability to think critically about risk in a dynamic environment, and superior communications and business skills to interact with stakeholders at all levels of our organization and subsidiaries. This is a role for someone who takes their craft seriously. The Security Engineer knows that security is not a checklist — it is a continuous practice which relies on learning and improving. They bring curiosity, precision, and a structured approach to investigation and remediation, and they contribute directly to the security posture that protects every firm in the enterprise. Beyond execution, this role is expected to continuously improve how security work is performed — identifying opportunities to reduce manual effort, increase consistency, and scale operations through thoughtful use of automation, integration, and emerging AI-enabled capabilities.

This is a regular (with benefits), salaried, exempt position that can be located near any SWCA office in a hybrid fashion.  Highly qualified, remote (= distributed) employees will also be seriously considered. Submitting a cover letter with your resume is strongly encourged. 

Application deadline: Our team will begin reviewing applications immediately, and interviews will be scheduled with qualified candidates on a rolling basis. The application process will remain open until we have received a robust pool of qualified candidates. Once we have identified suitable individuals, we may close the application process without prior notice. We appreciate the time and effort invested by all applicants and will carefully consider each submission.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field. Equivalent experience and certifications considered
• At least three (3) years of hands-on information security experience, with demonstrated involvement in incident response, IAM, or vulnerability management
• Proficiency with SIEM platforms, EDR tools (CrowdStrike, SentinelOne, etc.), and identity security in a Microsoft 365 / Azure environment
• Working knowledge of identity and access management principles and tools (Entra ID, Active Directory, PAM solutions)

Preferred Qualifications

• At least five (5) years of hands-on information security experience, with demonstrated involvement in incident response, IAM, or vulnerability management
• Experience supporting or securing cloud and SaaS environments
• Experience with security automation using scripting and API integrations
• Familiarity with integrating security tools and automating operational workflows
• Exposure to AI/ML or generative AI applications in cybersecurity operations, including the use of AI agents to automate or augment functional responsibilities
• Certification in CompTIA Security+, CySA+, SC-200, or equivalent. CISSP, CEH, GCIH, or other incident response certifications valued.

Knowledge, Skills and Abilities

• Familiarity with vulnerability scanning tools (Tenable, Rapid7 or equivalent)
• Structured, analytical approach to investigation with strong documentation and reporting discipline
• Understanding of common threat frameworks (MITRE ATT&CK) and their application to detection and response