Microsoft 365 Security Engineer

Posted Monday, August 11, 2025 at 10:00 AM

At Acra Lending our employees enjoy an opportunity to work with great people. We celebrate several events throughout the year accompanied by raffles and giveaways for employees nationwide. We are especially proud to give back to our community and truly enjoy one another's company. We provide a continental breakfast daily and cater lunch every Friday.

We are looking for candidates to join our team who are passionate about their vocation. Who are committed to making a contribution and are looking to gain experience in order to grow in their career. Our headquarters are located on a beautiful campus in Irvine, California and if you work out of our Irvine office we can also provide a free gym membership.

Summary

We are seeking a highly skilled Systems Engineer with a strong security focus to join our team. The ideal candidate will have extensive experience in security monitoring, application monitoring, and network monitoring while being proficient in multiple security tools. A deep understanding of Microsoft Security Tool stacks and hands-on expertise in SIEM (Security Information and Event Management) solutions are essential for this role.

This position will play a crucial role in designing, implementing, and maintaining our organization's security infrastructure to ensure a robust and resilient cybersecurity posture.

Essential Duties and Responsibilities

• Design, deploy, and maintain security monitoring solutions across enterprise environments.
• Implement and optimize Microsoft Security tools, including but not limited to Microsoft Defender for Endpoint, Defender for Office 365, Sentinel, Microsoft Purview, and Entra .
• Manage and enhance SIEM platforms to detect, analyze, and respond to security threats effectively.
• Monitor and analyze system and network activity for security incidents, vulnerabilities, and performance issues.
• Develop and refine incident response processes, ensuring swift detection and mitigation of security events.
• Collaborate with IT and security teams to harden system configurations, enforce security policies, and improve overall security posture.
• Conduct security assessments, penetration tests, and risk analyses to identify and mitigate security gaps.
• Automate security workflows and incident response procedures using scripting and automation tools (e.g., Power Shell, Python, or Azure Logic Apps).
• Stay updated with emerging security threats, vulnerabilities, and industry best practices to continuously enhance security defenses.
• Assist in compliance efforts, ensuring adherence to frameworks such as NIST, CIS, ISO 27001, and SOC 2.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Hands-on experience with Microsoft Security solutions, including Microsoft Defender, Sentinel, and Entra .
• Expertise in SIEM technologies (e.g., Microsoft Sentinel, Splunk, QRadar, or similar).
• Strong understanding of security monitoring, application monitoring, and network monitoring methodologies.
• Proficiency in Windows Server, Active Directory, and Azure security principles.
• Knowledge of firewall configurations, intrusion detection/prevention systems (IDS/IPS), endpoint detection & response (EDR), and network security.
• Certifications such as Microsoft Certified:
  Security Operations Analyst, CISSP, CISM, CEH, or GIAC.
• Knowledge of container security, Dev Sec Ops  principles, and cloud-native security tools.
• Familiarity with log aggregation, anomaly detection, and behavioral analytics.

Education and/or Experience

• 7+ years of experience in systems engineering with a focus on security.
• Experience in threat hunting, security incident investigation, and forensic analysis
• Experience working in environments compliant with HIPAA, GDPR, PCI-DSS, or SOX.
• Experience and knowledge of deploying, configuration and management of Microsoft Cloud and Security Stack. Including but not limited to:
  Azure AD, Entra,…