Security Administrator

Responsibilities

• Triage and respond to security alerts across Huntress, Blumira, and Microsoft Entra , investigating risky sign‑ins, anomalous behavior, and policy violations.
• Manage and optimize endpoint security tooling, including Sentinel One and other EDR/EPP platforms, ensuring coverage, policy enforcement, and timely response across the device fleet.
• Assess and help govern the security implications of AI tool adoption across the organization, evaluating data access, integration permissions, and acceptable use boundaries as new AI initiatives are introduced.
• Collaborate with the Platform, Product & Innovation team to ensure security controls and governance frameworks are built into AI and data‑driven projects from the outset, rather than retrofitted after deployment.
• Investigate security incidents end‑to‑end and produce clear documentation for technical and leadership audiences.
• Audit security configurations against established policies, identify implementation gaps, and surface findings with recommended remediation paths.
• Review and validate Conditional Access policies, MFA configurations, and identity hygiene across Microsoft Entra .
• Conduct vulnerability assessments and coordinate remediation with relevant IT and infrastructure owners.
• Perform routine audits of user access, privileged accounts, application permissions, and SaaS integrations.
• Support compliance gap analysis against SOC 2, NIST, and CIS Controls frameworks and contribute to the organization’s regulatory readiness roadmap.
• Evaluate security tools and processes and provide input on improvements that would meaningfully strengthen our posture.
• Assist in training junior IT staff on incident identification and response, progressively delegating routine work as their skills develop.
• Stay current with the evolving threat landscape, including AI‑specific risks, and bring relevant insights back to the team.

• 3+ years of hands‑on experience in IT security operations or security administration.
• Working knowledge of Microsoft Entra  (Azure AD), including Conditional Access, PIM, sign‑in log analysis, and identity protection.
• Hands‑on experience with endpoint security platforms such as Sentinel One, Crowd Strike, or equivalent EDR/EPP tools.
• Experience with SIEM platforms and vulnerability scanning technologies.
• Working knowledge of Linux systems, including command‑line proficiency and familiarity with common security and administrative tasks in Linux environments.
• Working knowledge of network security concepts, operating system security, and cloud security principles.
• Familiarity with compliance frameworks such as SOC 2, NIST, ISO 27001, or CIS Controls for gap analysis purposes.
• Strong communication skills, with the ability to translate technical findings for both IT peers and non‑technical stakeholders.
• Self‑directed and accountable, with the ability to manage competing priorities in a high‑alert‑volume environment.