Senior Security Engineer

Position Summary

NOVVA Data Centers is seeking a highly skilled Senior Security Engineer to lead the design, implementation, and operation of cybersecurity technologies that protect our enterprise, customer-facing systems, and mission-critical data center environments. This position serves as the technical cybersecurity lead and works closely with IT, Networking, Data Center Operations, Physical Security, Compliance, and leadership to define scope and prioritization. The ideal candidate combines strong engineering expertise with operational security experience and thrives in a fast-paced, highly available infrastructure environment.

• Design, implement, and maintain enterprise security technologies
• Lead deployment and management of:
  • Microsoft Defender XDR
  • Microsoft Entra
  • Privileged Identity Management (PIM)
  • Conditional Access
  • Defender for Cloud
  • Defender for Endpoint
  • Email Security
  • Vulnerability Management platforms
• Engineer secure cloud and hybrid infrastructure across Microsoft 365 and AWS
• Develop security standards and hardening baselines

• Lead incident response activities
• Investigate security alerts and indicators of compromise
• Perform threat hunting activities
• Conduct forensic investigations when required
• Coordinate response to cybersecurity incidents

Support and maintain compliance with:

• HITRUST
• SOC 2
• ISO 27001
• PCI DSS
• HIPAA
• Internal security audits

Develop security documentation including:

• Policies
• Standards
• Procedures
• Technical runbooks

• Manage enterprise vulnerability scanning
• Prioritize remediation activities
• Coordinate patch management with infrastructure teams
• Track remediation metrics

• Manage privileged access
• Review permissions and access controls
• Implement Zero Trust principles
• Support identity lifecycle processes

• Participate in infrastructure design reviews
• Evaluate new technologies
• Perform security risk assessments
• Recommend security improvements

• Mentor junior security staff
• Provide technical guidance
• Evangelize strong security practices
• Participate in after-hours incident response
• Support cybersecurity roadmap initiatives

• Bachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience)
• 7+ years of cybersecurity experience
• 5+ years of security engineering experience
• Experience administering Microsoft security technologies
• Experience with SIEM, EDR, IAM, and vulnerability management platforms
• Strong understanding of:
  • Networking
  • Active Directory
  • Microsoft 365
  • Windows Server
  • Linux
  • Firewalls
  • DNS
  • VPN
  • Zero Trust Architecture

One or more of:

• CISSP
• GIAC certifications
• GSEC
• GCIA
• GCIH
• Azure Security Engineer
• Microsoft Security certifications

Experience with:

• Service Now
• Power Shell
• Python
• Infrastructure as Code
• SIEM/SOAR platforms
• Vulnerability & Patch management
• Operational Technologies
• Data center operations

• Security Architecture
• Incident Response
• Threat Detection
• Security Engineering
• Risk Management
• Communication
• Project Leadership
• Continuous Improvement

• Comprehensive health, dental, and vision insurance
• 401k with company match
• PTO