Security Systems Engineer
Listed on 2026-01-01
-
IT/Tech
Cybersecurity, Network Security
About The Role
The Security Systems Engineer is a key member of Scoular’s Security Risk Management team and is responsible for hands‑on execution of core cybersecurity operations. This role focuses on SIEM management, endpoint protection, vulnerability management, incident response, email monitoring, and tier 1 security support across Scoular’s enterprise environment. The analyst assists with onboarding log sources, tuning alerts, monitoring security events, performing initial investigations, supporting remediation activities, and other project work.
The Security Systems Analyst partners closely with Infrastructure and IT Operations teams to ensure secure operation of systems across on‑premise and cloud environments. The role reports to the Lead Security Engineer and requires strong technical skills, attention to detail, excellent documentation habits, and the ability to collaborate effectively while continuously learning.
This position can be located in Scoular’s Omaha, NE or Overland Park, KS offices.
Security Operations & Monitoring- Monitor SIEM dashboards and alerts to detect suspicious activity and respond to incidents following established playbooks.
- Perform tier 1-level incident triage and escalated to senior team members as needed.
- Assist with onboarding log sources, validating data quality, and tuning SIEM alerts and dashboards.
- Support endpoint protection technologies (EDR/XDR) including Defender and Crowd Strike.
- Monitor and manage Microsoft email quarantine.
- Perform routine vulnerability scans, validate results, track remediation progress, and coordinate with system owners.
- Document findings, maintain dashboards, and assist in prioritizing remediation efforts based on risk.
- Support operational management of SIEM platforms (Sentinel, Crowd Strike) including basic configuration and alert refinement.
- Use Power Shell and/or Python to automate routine tasks, improve efficiency, and support data analysis.
- Assist in maintaining secure access controls using Entra / Azure AD and related IAM tools.
- Support enforcement of least‑privilege standards and monitor identity‑related security events.
- Assist Infrastructure team with basic troubleshooting related to firewalls, IDS/IPS, VPN, and secure network design.
- Monitor network traffic and alerts for indicators of compromise.
- Help review configuration of cloud resources for security compliance.
- Assist in monitoring cloud logs and security insights via Azure and SIEM tools.
- Contribute to security policies, standards, procedures, and knowledge‑base documentation.
- Participate in internal reviews aligned with frameworks such as NIST CSF, CIS, ISO Controls, or ITIL.
- Maintain precise documentation for incidents, investigations, and system changes.
- Participate in security reviews of new systems or architecture changes with guidance from senior team members.
- Support security projects including tool deployments, enhancements, and operational improvements.
- Coordinate with vendors, support POCs, and assist with testing new security technologies.
- Work daily with Infrastructure, Service Desk, and other IT teams to investigate issues and implement security recommendations.
- Provide clear communication to business units and end users when security remediation or follow‑up is needed.
- Actively contribute to a collaborative, learning‑focused team culture.
- 2–5 years experience in cybersecurity, IT operations, or technical security support.
- Hands‑on experience with SIEM platforms (Sentinel, Crowd Strike, Splunk, QRadar, Log Rhythm or similar).
- Experience with endpoint security tools (Defender, Crowd Strike or equivalent).
- Familiarity with Entra /Azure AD and identity security concepts.
- Basic understanding of vulnerability scanning tools, firewalls, IDS/IPS, network protocols (TCP/IP, OSI model), and cloud environments, particularly Azure.
- Ability to write or read basic Power Shell or Python scripts.
- Strong documentation, communication, and teamwork skills.
- Ability…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).