Lead Security Engineer

Education/Experience

Required:

Bachelor's degree in Information Security, Computer Science, a related discipline, or equivalent practical experience; 8 years of progressive experience in cybersecurity, security operations, or a similar function

• The Lead Security Engineer serves as a skilled, hands‑on security professional focused on security operations, incident response, and ownership of key platforms across Microsoft security tools and related technologies.
• This position goes beyond initial alert review by managing investigations, supporting coordinated response efforts, overseeing security platforms, and helping resolve risks across endpoint and identity environments.
• The SE2 partners with the Security Manager and CISO to strengthen security operations and provides guidance to Level 1 Security Engineers.
• This role also contributes to the alignment of cyber and physical security by supporting oversight of IP‑based physical security systems in partnership with the Physical Security team.

• Manage investigation, containment, and remediation efforts for incidents escalated
• Conduct in-depth analysis of endpoint, identity, and cloud security signals
• Assist with incident records, summaries, and required reporting
• Work with Infrastructure, IAM, and other IT groups to coordinate response activities

• Administer and support security tools and related operational processes
• Refine configurations to improve accuracy and effectiveness
• Research and validate security events, alerts, and findings
• Enhance rule performance and signal quality for the following areas:
• Microsoft Security Platform
• Web Application Firewall (WAF) Operations
• Data Loss Prevention Operations
• Asset Management Operations
• Identity and Access Management Operations

• Lead remediation work across endpoint devices and security platforms
• Respond to endpoint and platform‑related security events
• Collaborate with IT teams to apply security controls, hardening practices, and standards

• Support technical security governance for IP‑based physical security solutions, including:
• Partner with the Physical Security team to help ensure:
  • Secure network design and configuration for physical security systems
  • Proper identity and access safeguards
  • Consistency between cybersecurity controls and physical security operations

• Coach and support Security Engineer 1 (L1) team members
• Help develop security runbooks, operating procedures, and standards
• Identify opportunities to improve security tools, workflows, and operational practices
• Assist with metrics gathering and operational reporting