That's where you come in. We're looking for a mid-level technical lead to be responsible for safeguarding the organization's digital infrastructure while ensuring strict adherence to industry and federal compliance standards. This role focuses on the intersection of security operations and regulatory governance, specifically managing CMMC and ISO compliance frameworks.
The ideal candidate will bridge the gap between high-level security strategy and hands-on technical execution. They will be responsible for active threat hunting, vulnerability management, and the rigorous review and approval of OS updates to maintain a secure and stable environment. As a key member of the security team, you will leverage enterprise tools like SentinelOne to detect, respond to, and mitigate advanced threats across our global footprint.
This is a hybrid role, requiring at least two days per week on site at Reingold's headquarters in Alexandria, VA.
Here's the work you'll do: Essential Functions: - Endpoint Security Operations - Serve as the primary administrator and subject matter expert for SentinelOne, including threat detection, alert triage, remediation, and policy optimization.
- Microsoft 365 Security Administration - Manage and enhance Microsoft 365 security capabilities such as Defender for Office 365, Identity Protection, Conditional Access, and Secure Score initiatives.
- Threat Hunting & Incident Response - Conduct proactive threat hunting across endpoints and cloud services; lead investigations, containment, and recovery for security incidents.
- Compliance & Audit Support - Maintain documentation, evidence, and internal controls required for CMMC and ISO 27001; support internal and external audits.
- Endpoint & System Hardening - Apply and maintain security baselines across Windows, macOS, and Linux systems; ensure consistent configuration and compliance.
- Patch & Update Governance - Review OS and application updates, assess risk, validate compatibility, and approve deployment across the environment.
- Identity & Access Management - Support secure identity operations including MFA enforcement, privileged access workflows, and lifecycle management.
- Advanced Technical IT Support - Provide escalated troubleshooting and root cause analysis for endpoint, identity, and security related issues; collaborate closely with IT operations teams.
- Policy & Documentation Development - Draft, update, and maintain SSPs, IRPs, SOPs, and other security governance documents aligned with regulatory and organizational requirements.
This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change, or new ones may be assigned at any time
.
This role is a good fit for someone with these qualifications, experience and skills:
Preferred:- 4-6 years of experience in cybersecurity, corporate IT, or system administration.
- Hands on expertise with SentinelOne (or similar EDR) including threat hunting and policy management.
- Strong experience with Microsoft 365 Security Center, Defender, Conditional Access, and identity security.
- Familiarity with CMMC Level 2+ and ISO 27001 frameworks, including control implementation and audit preparation.
- Solid understanding of Windows, macOS, and Linux endpoint security and hardening.
- Experience supporting enterprise IT operations, including escalated troubleshooting and endpoint lifecycle management.
- Preferred certifications: Security+, CISSP, CISA, or other security focused credentials.
Required:
Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical field.
Supervisory Responsibilities: This position will not have direct reports but will be expected to mentor junior teammates and to lead by example and influence.
Work environment and physical requirements: Prolonged periods sitting at a desk and working on a computer.
Additional Information: 
