Cyber Security Engineer Job Hartselle area,Alabama USA,IT/Tech

Run and tune Rapid7 InsightVM scans, maintain asset coverage and scan schedules, and keep credentialed scanning healthy.
Prioritize findings by risk and exploitability, track remediation with IT owners, and report on SLA performance.
Validate patches and configuration fixes, and manage exceptions through a documented risk-acceptance process.

What You’ll Do Vulnerability and Exposure Management

Run and tune Rapid7 InsightVM scans, maintain asset coverage and scan schedules, and keep credentialed scanning healthy.
Prioritize findings by risk and exploitability, track remediation with IT owners, and report on SLA performance.
Validate patches and configuration fixes, and manage exceptions through a documented risk-acceptance process.

Detection and Response

Investigate and respond to alerts from Rapid7 InsightIDR, Sentinel One and Microsoft Defender.
Build and tune detection rules, alert thresholds and automated response actions to reduce noise and improve fidelity.
Lead or support incident response: scoping, containment, eradication, recovery and post-incident review.
Perform threat hunting using endpoint telemetry, identity logs and network data.

Endpoint Security

Administer the Sentinel One console: policies, exclusions, device groups, agent deployment and upgrade health.
Investigate threats with Sentinel One Deep Visibility and Storyline data, and perform remediation and rollback when needed.
Coordinate endpoint policy with Intune and Defender to avoid gaps and conflicts.

Email Security

Administer Barracuda Email Protection: filtering policies, quarantine management, impersonation and phishing protection, and allow/block lists.
Investigate reported phishing and suspicious messages, and remove malicious email from affected mailboxes.
Tune Barracuda and Microsoft 365 email controls together (SPF, DKIM, DMARC, Defender for Office 365) to cut false positives without opening gaps.
Support security awareness efforts with phishing trends and simulation results.

Microsoft Environment Hardening

Strengthen Entra Active Directory security:
Conditional Access, MFA, privileged access and identity protection.
Improve Microsoft Secure Score and apply CIS benchmarks across Windows, Microsoft 365 and Azure.
Protect Microsoft 365 data with DLP and sensitivity labels.
Partner with infrastructure teams on secure configuration of servers, Group Policy and cloud workloads.

Program and Documentation

Write and maintain runbooks, incident playbooks, standards and architecture documentation.
Support audits and compliance requests with evidence collection and control testing.
Produce metrics and clear status reports for IT leadership.
Participate in an on-call rotation for security incidents.

What You Bring

3–5 years of hands-on experience in cybersecurity engineering, security operations or a closely related IT security role.
Working experience with Rapid7 (InsightVM and/or InsightIDR) or a comparable vulnerability management or SIEM platform.
Hands-on administration of Sentinel One or another enterprise EDR such as Crowd Strike or Defender for Endpoint.
Experience with Barracuda or another email security gateway such as Checkpoint, Proofpoint or Mimecast, plus email authentication (SPF, DKIM, DMARC).
Strong knowledge of the Microsoft ecosystem:
Active Directory, Entra , Microsoft 365, Intune and Windows Server.
Solid understanding of networking (TCP/IP, DNS, firewalls, VPN) and common attack techniques mapped to MITRE ATT&CK.
Experience investigating incidents and documenting findings clearly for technical and non-technical audiences.
Scripting ability in Power Shell;
Python is a plus.
Bachelor's degree in cybersecurity, computer science, IT or a related field, or equivalent experience.

Nice to Have