Senior Cybersecurity Engineer | Camden Corporate Office (Remote Position

Senior Cybersecurity Engineer

The Senior Cybersecurity Engineer is a senior-level technical position within Camden's Information Technology Department responsible for the design, implementation, administration, monitoring, and continuous improvement of enterprise security technologies and infrastructure protection controls.

This role provides hands-on engineering ownership for security platforms, vulnerability and exposure management, infrastructure hardening, cloud and identity security, automation, audit support, and incident response. The position works closely with infrastructure, cloud, networking, application development, operations, audit, and business teams to ensure Camden systems, applications, data, and technology services are protected against evolving threats.

The Senior Cybersecurity Engineer is expected to operate with a high degree of technical independence, serve as a subject matter expert for security engineering and control implementation, and contribute to security roadmaps, standards, documentation, and operational procedures. This role bridges traditional security analyst responsibilities with broader systems and security engineering duties, helping ensure Camden maintains secure, resilient, and supportable technology environments.

Essential Functions

• Design, implement, maintain, and optimize enterprise security controls and technologies across endpoint, server, network, identity, cloud, and application environments.
• Administer and support security platforms used for detection, prevention, monitoring, vulnerability assessment, asset visibility, endpoint protection, log collection, correlation, alerting, and reporting.
• Develop and maintain secure configuration baselines, system hardening standards, security control procedures, and technical implementation guidance.
• Research, evaluate, test, and recommend new or improved security technologies that support Camden business needs and reduce risk.
• Participate in technology architecture reviews, solution design sessions, and project planning activities to ensure appropriate security controls are included early in the lifecycle.
• Author and maintain technical documentation, architecture diagrams, operational runbooks, standards, and procedures related to systems and security platforms.

Vulnerability and Exposure Management

• Lead or support continuous asset discovery, vulnerability assessment, prioritization, remediation tracking, and exposure management across enterprise technology environments.
• Prioritize remediation based on business risk, exploitability, criticality, compensating controls, threat intelligence, and operational impact.
• Partner with infrastructure, application, database, cloud, and business teams to drive timely remediation of vulnerabilities and security configuration findings.
• Validate remediation completion through vulnerability rescans, manual verification, control testing, and supporting evidence review.
• Develop recurring vulnerability metrics, dashboards, and management reporting that clearly communicate risk reduction, remediation progress, and areas requiring leadership attention.
• Assist with attack surface reduction, secure configuration validation, legacy system risk review, and technical remediation planning.

Security Monitoring, Investigation, and Incident Response

• Analyze, troubleshoot, and investigate security events, alerts, system anomalies, suspicious activity, network traffic, endpoint telemetry, cloud logs, and automated security notifications.
• Participate in incident response activities including triage, investigation, containment, eradication, recovery, documentation, and post-incident improvement efforts.
• Support the Security Incident Response Team during security events, tabletop exercises, and response planning activities.
• Assist with detection engineering, log source validation, alert tuning, threat hunting, and security monitoring use case development.
• Coordinate with internal IT teams, managed service providers, vendors, and other partners during incident investigations and technical response activities.
• Document root cause, business impact, technical findings, corrective actions, and lessons learned from security events.

Cloud, Identity, and Microsoft Security

• Support security controls and operational processes across Microsoft 365, Azure, Entra , Defender, Sentinel, and related cloud-hosted services.
• Assist with identity governance, privileged access, conditional access, multi-factor authentication, passwordless authentication, role-based access control, and Zero Trust initiatives.
• Review cloud and SaaS configurations for alignment with Camden security standards, regulatory needs, and industry best practices.
• Monitor cloud security posture, recommend remediation activities, and collaborate with platform owners to reduce misconfiguration and identity-related risk.
• Support secure onboarding and operational review of new cloud services, integrations, applications, and third-party technology platforms.

Security Automation and…