Security & Compliance Engineer

TTx, Northeast Ohio's premier IT organization, is focused on providing clients with best-in-class information technology, intentional customer-centric service rooted in our beliefs that "people matter", and support of our client's reputation through assistance, expertise, and long-term strategy. We strive to become the most trusted information technology solution provider in our market. The role of Security and Compliance Engineer is specifically responsible for ensuring the security, integrity, and compliance of our TTx client IT infrastructure and systems.

• Conduct cybersecurity and compliance assessments or related tasks for ongoing customer engagements:
  • Coordinate and schedule project tasks
  • Coordinate and lead customer-facing meetings, interviews, and walkthroughs
  • Review and interpret results of scans, interviews, and walkthroughs
  • Produce consistently high-quality reports and associated deliverables
• Configure and deploy security tools for on-prem and cloud infrastructure:
  • Vulnerability scanning solutions
  • Security and/or compliance framework control tools
  • Active Directory auditing tools
• Audit secure infrastructure configurations across on-premises and cloud environments, including firewalls, networks, servers, and endpoints
• Assess and maintain evidence for compliance readiness with relevant frameworks and regulations (e.g., NIST, ISO 27001, HIPAA, SOC 2, PCI-DSS)
• Facilitate ongoing collaboration with customer IT leaders and teams to integrate security into system design, operations, and compliance-driven objectives
• Research and stay current with emerging security threats, technologies, and compliance requirements

• Provide resolution confirmation, proper documentation, and closure of incident tickets into Connect Wise.
• Maintain documentation for security configurations, compliance audits, and incident response procedures
• Assist in the development of, and ensure adherence to, TTx Standard Operating Procedures and best practices.
• Assist with Client Account Reviews for assigned clients, providing necessary documentation and input to Director of Technology and Cybersecurity.

• 5-10 years of experience in IT systems engineering with a focus on security and compliance
• Advanced knowledge and hands‑on experience in infrastructure configuration, including server and network setup and hardening
• Strong understanding of security frameworks and compliance standards (NIST, ISO 27001, CIS Controls, etc.)
• Proficiency with security tools such as firewalls, IDS/IPS, SIEM, vulnerability scanners, and endpoint protection solutions
• Experience with Windows and Linux server administration and hardening
• Knowledge of network protocols, routing, switching, and network security best practices
• Familiarity with cloud security (AWS, Azure, or GCP) and identity and access management (IAM)

• Relevant certifications such as CISSP, CISM, CEH, GCIH, Security+, or equivalent
• Experience with automation and scripting (Power Shell, Python, Bash) for security tasks
• Knowledge of container security (Docker, Kubernetes) and Dev Sec Ops  practices
• Experience conducting compliance audits and working with external auditors
• Strong analytical and problem‑solving skills with attention to detail

• Excellent communication skills with the ability to explain complex security concepts to technical and non‑technical stakeholders
• Proactive mindset with a commitment to continuous improvement and learning
• Ability to work independently and collaboratively in a fast‑paced environment
• Strong ethical standards and commitment to maintaining confidentiality