Security Engineer - Cybersecurity Infrastructure Technology Services

Job Details

• Position Type:
  Regular (full-time)
• Language Fluency:
  English (Required)
• Work Shift:
  
  1st shift (United States)
• Location:
  
  Office-based (5 days a week) – Atlanta/GA, Charlotte/NC, Raleigh/NC, Wilson/NC
• No work visa sponsorship or immigration support will be provided for this position.

• Microsoft Active Directory Domain Services
• Microsoft Active Directory Federation Services (ADFS)
• Microsoft Active Directory Certificate Services
• Microsoft DHCP
• Microsoft DNS
• Microsoft Entra Connect
• Microsoft Distributed File System (DFS)
• Microsoft Key Management Services (KMS)
• Microsoft Identity Manager (MIM)
• Microsoft Remote Desktop Licensing (RDL)
• Symantec product suite
• Quest product suite
• Cisco Identity Services Engine (ISE)

• Designs and implements cybersecurity solutions that protect critical assets within the job area, contributing to the technical design and implementation approach while following established strategies and patterns.
• Performs threat modeling, security testing, and penetration testing for the platforms and services in scope, using structured analysis to identify and remediate significant vulnerabilities.
• Integrates and configures information security technologies in production environments, implementing and refining configuration patterns, automation, and handoff steps for assigned systems or services.
• Serves as a technical escalation point within the team for challenging security issues, investigating root causes and developing practical, reusable fixes that improve team workflows.
• Evaluates relevant security threats, tools, and design options, and provides input that helps shape technical plans, priorities, and goals for the job area.
• Collaborates closely with product and engineering teammates to apply security architecture guidance, secure by design practices, and governance controls in day-to-day development activities.
• Develops and maintains security baselines, guardrails, and control implementations for systems and applications in the area of responsibility, helping support regulatory and policy compliance.
• Leads the technical execution of incident response and basic forensic activities for services in scope, following playbooks, coordinating tasks with teammates, and suggesting improvements to procedures and tooling.
• Provides guidance, coaching, and informal training to other security engineers and technical teammates, sharing best practices through design and code reviews and knowledge sharing sessions.
• Leads significant security engineering work streams or end‑to‑end processes within the job area, coordinating contributions from lower level technical professionals and reviewing outputs for quality and alignment.

• Bachelor’s degree or equivalent education, training, and work‑related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

• Bachelor's degree and six years of experience or an equivalent combination of education and work experience.
• Banking or financial services experience.
• Service Now’s Certified System Administrator (CSA) – certification strongly preferred.
• Knowledge of and experience with the following technology systems and platforms is preferred:
  • Microsoft Active Directory Domain Services
  • Microsoft Active Directory Federation Services (ADFS)
  • Microsoft Active Directory Certificate Services
  • Microsoft DHCP
  • Microsoft DNS
  • Microsoft Distributed File System (DFS)
  • Microsoft Key Management Services (KMS)
  • Microsoft Identity Manager (MIM)
  • Microsoft Remote Desktop Licensing (RDL)
  • Quest product suite
  • Hewlett Packard Enterprise physical servers
  • Dell physical servers
  • Windows Server operating systems (Windows Server 2025 through Windows Server 2012 R2)
• Power Shell scripting knowledge and ability to write customized scripts is preferred.
• Knowledge of networking and firewall rulesets…