Security Engineer
On-site security engineer at a managed services provider in Belcamp, MD serving GovCon clients. Day to day: security alert triage and incident response, endpoint hardening, Microsoft 365/Defender and Entra ID security, vulnerability remediation, and NIST 800-171/CMMC compliance work. Requires Security+ certification and 2+ years of security experience.
- Compensation
- Not disclosed
- Location
- Belcamp, MD
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 4–6 years of technical IT experience, including 2+ years of security experience
- Strong troubleshooting across Windows endpoints and common security failure modes
- Troubleshooting identity and authentication issues (MFA, Conditional Access, account compromise)
- Troubleshooting Microsoft 365 security configurations
- Working knowledge of TCP/IP, DNS, VPNs, and firewall concepts
- Knowledge of common attack vectors (phishing, credential theft, ransomware)
- Knowledge of endpoint hardening and patch management best practices
- Experience supporting the Microsoft Defender suite
- Experience with Microsoft Entra ID administration and security controls
- Experience with log analysis, security alert triage, and investigation
- Familiarity with NIST SP 800-171 and CMMC requirements
- Bachelor's degree in cybersecurity, IT, computer science, or related field, or equivalent professional experience
- CompTIA Security+ certification
- U.S. citizenship required due to ITAR/EAR compliance for sensitive government data
- Employment contingent on background check and drug test; skills testing may be required; ability to lift 25 lbs
Nice to have
- Experience with SIEM platforms, PowerShell or another scripting language, vulnerability management, incident response, and security-control implementation
- Additional certifications such as CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate (SC-200)
Full description
About the role:
The Security Engineer is responsible for implementing, maintaining, and improving security controls across client environments as well as maintaining internal MSG infrastructure. This role supports incident response, endpoint security, Microsoft 365 security configuration, vulnerability remediation, and compliance execution (ex: NIST / CMMC readiness).
This position requires strong technical ownership, sound judgment, and the ability to operate independently across multiple client environments and MNS internal infrastructure. The Security Engineer is expected to take responsibility for issues through resolution, maintain clear and accurate documentation, communicate effectively with technical and non-technical stakeholders, and consistently apply established security standards and best practices. This role requires the ability to prioritize competing demands, identify and escalate risk appropriately, and contribute to the continued improvement and standardization of MNS security processes, tooling, and client security baselines.
What you'll do
Security Operations & Response
- Monitor and respond to security alerts across endpoint, email, identity, and cloud platforms
- Triage and investigate suspicious activity (phishing, malware, lateral movement indicators, unauthorized access attempts)
- Perform containment actions (isolation, credential resets, policy changes, IOC blocking)
- Coordinate escalation and communication with internal leadership and clients as needed
- Participate in post-incident reviews and recommend improvements
Endpoint Security & Hardening
- Ensure endpoints meet baseline security standards (patching, encryption, AV/EDR coverage, least privilege), both for clients and internal MSG standards
- Support remediation of malware and persistent threats
- Manage and enforce device compliance policies through Intune (where applicable)
Microsoft 365 Security
- Configure and support Microsoft Defender security controls (Defender for Endpoint, Defender for Office, etc.)
- Support M365 identity protection: MFA, Conditional Access, SSO integrations, risky sign-in remediation
- Secure Exchange Online (anti-phishing policies, mail flow rules, quarantine management)
- Support secure SharePoint/OneDrive access controls and external sharing governance
- Assist with secure tenant configurations and security posture improvements
Vulnerability Management & Remediation
- Run or support vulnerability scans and interpret results
- Prioritize remediation based on risk and business impact
- Coordinate patching and configuration changes with IT and client stakeholders