Summary

The IT Security Engineer is responsible for administering and strengthening the organization’s cybersecurity program across infrastructure security, compliance, and user awareness. This role leads security patching and vulnerability remediation for servers and network-connected hardware; manages internal audits, compliance documentation, and the System Security Plan (SSP); supports risk assessments and disaster recovery testing; and drives security training and awareness initiatives. The position partners closely with the Senior Network Engineer, who retains ownership of server architecture, configuration, and infrastructure standards as well as technology procurement.

Essential Duties and Responsibilities

Security Patching and Vulnerability Management

Own security patching and vulnerability remediation for all servers, network-connected hardware, and infrastructure systems
Plan, schedule, test, and deploy security updates in coordination with infrastructure owners and maintenance windows
Validate patch compliance, document exceptions, and track remediation status to closure
Perform vulnerability scanning, risk prioritization, and remediation follow-up across server and hardware platforms
Coordinate with the Senior Network Engineer, who retains ownership of server architecture, configuration, and overall infrastructure standards

Security Operations and Monitoring

Monitor security alerts, logs, and anomalies across systems, endpoints, and supported security platforms
Investigate security events and coordinate remediation with internal teams and third-party providers
Support threat detection, incident response, and control validation using available monitoring and security tools
Administer endpoint protection, antivirus, and related detection technologies

Incident Response and Recovery

Serve as a primary responder or coordinator during cybersecurity incidents
Perform incident triage, root cause analysis, containment coordination, and recovery support
Coordinate with internal stakeholders and external vendors during active incident response
Document incidents, lessons learned, and corrective actions to improve future response readiness

Identity and Access Security

Review and validate identity-related security settings, access risks, and MFA compliance
Support periodic access reviews and identify remediation needs for excessive or outdated access
Partner with system and infrastructure administrators to enforce least-privilege and role-based access practices
Support audit readiness for access control compliance

Network and Security Infrastructure Support

Support firewall, VPN, remote access, and related security operations without owning core network configuration
Review security posture and recommend hardening improvements for network and infrastructure platforms
Monitor for suspicious traffic or activity and escalate concerns as appropriate
Coordinate implementation and verification of approved hardening standards across servers and hardware platforms

Compliance, Audits, and Security Program Support

Plan and conduct internal security audits, control reviews, and remediation tracking across applicable frameworks and internal requirements
Coordinate risk assessments, evaluate control effectiveness, and track corrective actions to closure
Manage the System Security Plan (SSP), including updates to scope, system boundaries, control implementation statements, and supporting evidence
Coordinate audit readiness activities and support external assessments, customer questionnaires, and compliance reviews
Support business continuity and disaster recovery planning activities, including test coordination, documentation of results, and follow-up on corrective actions
Lead security training and awareness initiatives for employees and internal stakeholders

Documentation, Policy, and Process Ownership

Develop, maintain, and govern security documentation, including policies, standards, procedures, control evidence, and audit artifacts
Maintain related compliance documentation as systems, controls, or scope change
Develop and improve repeatable IT and security processes, standards, and compliance workflows
Prepare awareness materials, training content, and recurring security communications

Vendor Coordination and Tool Management

Act as an internal technical owner for assigned security tooling and backup/disaster recovery platforms
Coordinate with third-party providers, including MDR, MSP, auditors, and other security or compliance partners
Evaluate and recommend security tools, platform improvements, and process enhancements
Serve as the security and compliance reviewer for hardware procurement, partnering with the Senior Network Engineer to evaluate proposed equipment and verify its inclusion on all applicable approved product, compatibility, security, and CMMC compliance lists before purchase approval.

Qualifications

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field preferred; equivalent experience will be considered
3–5+ years of experience in cybersecurity, systems security, compliance, or infrastructure security roles
Experience conducting risk assessments, control reviews, vulnerability remediation, and internal audit preparation
Experience supporting business continuity and disaster recovery planning, test execution, documentation, and corrective action tracking
Working knowledge of NIST 800-171, CMMC, DFARS, CUI handling, and general IT compliance practices
Knowledge of endpoint protection, patch management, system hardening, access control, and security monitoring concepts
Ability to develop and maintain policies, standards, procedures, audit evidence, and technical security documentation
Strong communication, organization, and cross-functional collaboration skills

Preferred Certifications

CompTIA Security+
CompTIA Network+
CompTIA CySA+ or a comparable security operations certification
ISC2 Certified in Cybersecurity (CC) or CISSP, depending on experience level
CMMC Registered Practitioner (RP) or a comparable compliance-focused credential preferred
ITIL, Microsoft security, or vendor-specific endpoint and security platform certifications are a plus

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.
This role is primarily office-based with routine interaction with end users, IT staff, server rooms, network closets, and production or warehouse areas as needed.
The position may require occasional after-hours work for patching, maintenance windows, incident response, disaster recovery testing, or audit preparation activities.
The employee may occasionally be exposed to moderate noise, moving mechanical parts, elevated work areas, or risk of electrical shock when working around technical equipment.
Occasional travel to other divisions, branch locations, or customer sites may be required.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
The employee must occasionally lift and/or move equipment or materials up to 30 pounds.
The employee is regularly required to sit, use hands, speak, hear, and work at a computer for extended periods.
The employee is occasionally required to stand, walk, bend, reach, climb, balance, stoop, kneel, crouch, or crawl when accessing equipment, cabling, or technical spaces.
Specific vision abilities required by this job include close vision and the ability to adjust focus for reading screens, labels, technical documentation, and diagrams.

Job description