Security Engineer

Shelton, CT

$115,000–$120,000 Per Year
Instant Apply

12 days ago

Job Description

A leading company in rail infrastructure inspection and diagnostics is seeking a Security Engineer to join its IT team. This newly created role gives the position a dedicated owner across endpoint detection and response, vulnerability management, and identity and access management. Reporting to the Manager, IT Infrastructure and Support, the Security Engineer is responsible for owning the company's day-to-day security operations and maturing the practice around them, including runbooks, asset inventory, incident handling, and program metrics.

Salary + Additional Benefits:

$115,000-$120,000
Medical, Dental, Vision Insurance
401K - company match

Location: Shelton, CT
Type of Position: Direct Hire

Responsibilities:

Security engineering and operations
- Own the deployment, configuration, and daily monitoring of our vulnerability management platform, and drive patching and remediation to closure across a predominantly Windows environment.
- Monitor, tune, and report on endpoint detection and response coverage, and lead the response when something is found.
- Perform root cause analysis on security incidents and see corrective actions through.
- Scope and coordinate penetration testing and remediation with external partners.
- Maintain security runbooks, asset inventories, and incident logs.
Identity and access
- Administer and harden Microsoft 365 and Entra ID, with a focus on secure configuration, conditional access, and mail security.
- Build the access model for third-party SaaS used across enterprise systems and engineering, so that permissions match roles rather than accumulate.
- Support device management and compliance across the fleet.
Governance, compliance, and measurement
- Align IT processes, documentation, and controls with ISO 27001 and other relevant frameworks.
- Support customer security assessments and questionnaires, and own the technical answers in them.
- Establish and maintain security posture KPIs that show whether the program is improving, and report them to IT and digital leadership.
- Contribute to security policy, including acceptable use of AI tools and SaaS.
Infrastructure and IT operations
- Own the configuration and maintenance of security appliances including firewalls and routers.
- Use our central IT management platform for software deployment, patching, scripting, and remote troubleshooting.
- Support provisioning, imaging, and deployment of Windows laptops and workstations.
- Assist with troubleshooting and user access provisioning for core business systems.
- Automate routine work rather than repeating it.

Requirements:

Five or more years in systems administration or IT infrastructure with a substantial security focus, or a cybersecurity degree with equivalent hands-on experience
Solid foundational knowledge of Windows Server and desktop environments
Hands-on experience with cloud infrastructure in Azure or AWS, and comfort working across both
Experience managing and supporting users in Microsoft 365, including identity and access configuration
Experience with enterprise-grade security appliances such as firewalls and routers
Practical vulnerability management experience: scanning, prioritization, and driving remediation with teams who do not report to you
Scripting for automation of routine tasks (PowerShell, Python, or similar)
Sound judgment about risk, and the ability to explain a security decision to a non-technical audience
A collaborative, team-first mindset
Preferred
- Direct experience with Rapid7, SentinelOne, or comparable vulnerability management and XDR platforms
- Experience with central IT management platforms such as ConnectWise Automate
- Working experience with ISO 27001; exposure to NIST, SOC 2, or ITIL is an asset
- Security certifications (CISSP, CISM, Security+, AZ-500, AWS Security Specialty, or similar)
- Device management tooling (Intune or equivalent)
- Experience as the dedicated security specialist on a small IT team
- Experience in an operational or industrial environment where availability and safety carry weight
- Experience in rail testing, NDT, or sensor-based inspection industries (ultrasound, eddy current, electromagnetic, etc.)

Due to the high volume of applications we typically receive, we regret that we are not able to personally respond to all applications. However, if you are invited to take the next step in the process, you will typically be contacted within one week of submitting your application.

#LI-DNI

Numbers & Facts

Location	Shelton, CT
Salary	$115,000–$120,000 Per Year

Skills

Amazon Web Services (AWS)unmatched
Artificial Intelligence (AI)unmatched
Business Solutionsunmatched
CISM - Certified Information Security Managerunmatched
CISSP - Certified Information Systems Security Professionalunmatched
Centralized Operations/Managementunmatched
Cloud Computingunmatched
CompTIA Security+unmatched
Computer Securityunmatched
Computer Workstationsunmatched
Corrective Actionunmatched
Dental Insuranceunmatched
Desktop Environmentsunmatched
Diagnostics Solutions/Softwareunmatched
Documentationunmatched
Electromagnetismunmatched
Establish Prioritiesunmatched
Firewall Appliancesunmatched
ISO (International Organization for Standardization)unmatched
ITIL (IT Infrastructure Library)unmatched
Identify Issuesunmatched
Identity Data Managementunmatched
Incident Responseunmatched
Information Technology & Information Systemsunmatched
Internet Securityunmatched
Laptop PCunmatched
Leadershipunmatched
Machine Toolunmatched
Maintenance - Appliancesunmatched
Management of Information Systems/Technology (MIS)unmatched
Metricsunmatched
Microsoft Access Databaseunmatched
Microsoft Product Familyunmatched
Microsoft Windows Azureunmatched
Microsoft Windows Operating Systemunmatched
Microsoft Windows Serverunmatched
Network Routersunmatched
Nondestructive Testing (NDT)unmatched
Penetration Testingunmatched
Performance Metricsunmatched
Python Programming/Scripting Languageunmatched
Riskunmatched
Root Cause Analysisunmatched
Scripting (Scripting Languages)unmatched
Security Analysisunmatched
Security Policyunmatched
Software Patchesunmatched
Software as a Service (SaaS)unmatched
Systems Administration/Managementunmatched
Systems Engineeringunmatched
Team Playerunmatched
Technical Supportunmatched
Testingunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
Ultrasoundunmatched
Vehicle Fleetsunmatched
Vision Planunmatched
Windows PowerShellunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder

Security Engineer

Job Description

Numbers & Facts

Skills

Be found by employers

Level up your application

Professional resume templates

Free resume builder