Security Engineer (ON-SITE in Wallingford, CT

this is an in-person role, 5 days a week, with a daily commute to wallingford, ct. Do not apply if you cannot get to wallingford, ct 5 days a week! No hybrid or remote work.

this role is not for software developers.

job title: security engineer (future security practice lead)

reports to: operations manager

about the role

we are seeking a security engineer who is ready to roll up their sleeves and help build a world-class security practice from the ground up.

this role is both hands-on and strategic. You’ll serve as the technical lead on security initiatives while developing into a future security manager or practice lead — helping define strategy, build a team, and guide clients through security transformation.

if you want to build something meaningful and own it, this is that opportunity.

key responsibilities

phase 1: hands-on security implementation (the doer)

• own daily security operations: endpoint protection, patch management, identity & access controls, vulnerability scanning, logging, and monitoring
• deploy and manage tools such as sentinelone, huntress, microsoft defender, azure ad, intune, conditional access, and mfa
• perform internal security assessments and support compliance initiatives (cmmc, itar, nist, hipaa)
• evaluate and implement siem, edr, email filtering, and threat intelligence tools
• respond to security events and manage incident resolution and reporting
• partner with service desk and engineering teams to remediate risks and enforce security baselines
• assist in vendor and tool selection as we scale and standardize

phase 2: strategic growth & leadership (the builder)

• define and document security standards, baselines, and sops
• contribute to service packaging, pricing, and go-to-market strategy
• establish governance processes and client risk scoring models
• hire, mentor, and manage junior security team members over time
• represent security initiatives in client qbrs and leadership discussions

qualifications

• must-have experience
• 3–5 years of hands-on cybersecurity experience (msp, soc, or it services preferred)
• experience with endpoint protection (sentinelone, defender, huntress), siem tools, firewalls, email security, and patching platforms
• strong experience in microsoft 365 and azure ad environments
• knowledge of compliance frameworks (nist 800-171, cmmc, itar, hipaa, soc
  2)
• proven ability to own and execute security projects end-to-end

preferred qualifications

• certifications such as security+, cissp, sscp, cisa, or microsoft sc-200
• experience with mdr/edr/xdr, vulnerability management, or security automation (powershell, scripting)
• experience documenting policies and working with grc tools
• previous experience mentoring or leading technical team members

soft skills

• entrepreneurial mindset — thrives in a “build mode” environment
• strong communicator who can translate technical risk into business impact
• detail-oriented with strong documentation and follow-through
• growth-driven with a long-term focus on leadership