IT Security Engineer

Job Title : IT Security Engineer Reports To: IT Manager FLSA Status: Exempt Department: IT/IS Division: 100 Pay Range to Start : $125K - $ 150 K ( Based on Experience ) Summary The IT Security Engineer is responsible for administering and strengthening the organization’s cybersecurity program across infrastructure security, compliance, and user awareness. This role leads security patching and vulnerability remediation for servers and network-connected hardware; manages internal audits, compliance documentation, and the System Security Plan (SSP); supports risk assessments and disaster recovery testing; and drives security training and awareness initiatives. The position partners closely with the Senior Network Engineer, who retains ownership of server architecture, configuration, and infrastructure standards as well as technology procurement. Essential Duties and Responsibilities Security Patching and Vulnerability Management Own security patching and vulnerability remediation for all servers, network-connected hardware, and infrastructure systems Plan, schedule, test, and deploy security updates in coordination with infrastructure owners and maintenance windows Validate patch compliance, document exceptions, and track remediation status to closure Perform vulnerability scanning, risk prioritization, and remediation follow-up across server and hardware platforms Coordinate with the Senior Network Engineer, who retains ownership of server architecture, configuration, and overall infrastructure standards Security Operations and Monitoring Monitor security alerts, logs, and anomalies across systems, endpoints, and supported security platforms Investigate security events and coordinate remediation with internal teams and third-party providers Support threat detection, incident response, and control validation using available monitoring and security tools Administer endpoint protection, antivirus, and related detection technologies Incident Response and Recovery Serve as a primary responder or coordinator during cybersecurity incidents Perform incident triage, root cause analysis, containment coordination, and recovery support Coordinate with internal stakeholders and external vendors during active incident response Document incidents, lessons learned, and corrective actions to improve future response readiness Identity and Access Security Review and validate identity-related security settings, access risks, and MFA compliance Support periodic access reviews and identify remediation needs for excessive or outdated access Partner with system and infrastructure administrators to enforce least-privilege and role-based access practices Support audit readiness for access control compliance Network and Security Infrastructure Support Support firewall, VPN, remote access, and related security operations without owning core network configuration Review security posture and recommend hardening improvements for network and infrastructure platforms Monitor for suspicious traffic or activity and escalate concerns as appropriate Coordinate implementation and verification of approved hardening standards across servers and hardware platforms Compliance, Audits, and Security Program Support Plan and conduct internal security audits, control reviews, and remediation tracking across applicable frameworks and internal requirements Coordinate risk assessments, evaluate control effectiveness, and track corrective actions to closure Manage the System Security Plan (SSP), including updates to scope, system boundaries, control implementation statements, and supporting evidence Coordinate audit readiness activities and support external assessments, customer questionnaires, and compliance reviews Support business continuity and disaster recovery planning activities, including test coordination, documentation of results, and follow-up on corrective actions Lead security training and awareness initiatives for employees and internal stakeholders Document…

View the full posting and apply