Mid Security Engineer

Summary of the Role 

We are looking for a Midlevel Security Engineer to own the operational core of our security program across Microsoft and AWS environments. Working closely with the Senior Security Engineer, you will actively execute vulnerability scanning, CVSS-based triage, patch management, and remediation to drive findings through verified closure. Additionally, you will support everyday security operations, network/application security, and serve as an internal first responder for managed detection and response (MDR) escalations.

Desired Skills

• Upper Intermediate English proficiency (strong verbal and written communication).
• 3+ years of hands-on security engineering experience in vulnerability management and security operations.
• Demonstrated experience running vulnerability scanning and CVSS-based triage, actively driving findings through remediation to closure.
• Practical experience across the Microsoft security stack, specifically Microsoft Defender (Endpoint/Office 365), Intune, and Entra ID.
• Working knowledge of securing cloud environments and native services within AWS.
• Applied experience responding to operational security incidents and triage escalations.

Responsibilities

• Vulnerability & Patch Management: Execute routine vulnerability scanning, perform CVSS triage, deploy patches, and coordinate remediation across enterprise endpoints and cloud systems.
• Microsoft & AWS Operations: Maintain, monitor, and enforce security controls across Microsoft Defender, Intune, Entra ID, and AWS infrastructure.
• Incident Response & MDR Support: Act as the internal first responder for MDR escalations, assisting with investigation, containment, and mitigation.
• Security Hardening Execution: Collaborate with system and engineering owners to execute security standards established by the Senior Security Engineer.

Nice-to-Haves

• Security certifications such as Security+, SC-200, AZ-500, or AWS Certified Security - Specialty.
• Experience in financial services, fintech, or highly regulated environments (SOC 2, PCI DSS, GLBA, ISO 27001).
• Basic automation and scripting experience using PowerShell or Python.
• Prior experience working alongside an MDR/MSSP or supporting security audit evidence collection.

Who You Are

• Strong Ownership & Follow-Through: You are operationally disciplined and take pride in independently driving security findings through to verified closure.
• Collaborative Communicator: You maintain strong documentation, communicate clearly with system owners, and escalate issues when necessary without hesitation.
• Execution-Minded Partner: You thrive working alongside senior engineers, translating strategic hardening standards into daily operational success.