Cloud Security & Incident Response Engineer

System Soft Technologies; Rosemont (IL); On-site; USD 90,000 - 140,000; Full time

Job summary

System Soft Technologies seeks a hands-on Cybersecurity Administrator to join the Information Security team in Rosemont, IL. This role focuses on administering, hardening, and operating security controls across a hybrid Azure and on‑prem environment.

You will work on incident response, identity hardening, cloud security engineering, and vulnerability remediation, leveraging Defender XDR, Sentinel, Entra ID, and automation to strengthen security across the ecosystem.

Qualifications

• 3–5+ years IT experience with at least 3 years in Cybersecurity.
• 2+ years hands-on with Microsoft technologies in admin/engineering/operational capacity.
• Advanced cybersecurity certifications in good standing (e.g., CEH, OSCP, AZ-500, SC-300).
• Deep, hands-on knowledge of Defender (Cloud/Endpoint/XDR), Intune, Sentinel, and Entra ID.
• Extensive experience operating hybrid cloud security architecture and controls.
• Strong background in security tooling administration, configuration, and tuning.
• Proven experience with endpoint security and modern device management (Intune).
• Advanced knowledge of network security concepts, including VPNs, firewalls, and SASE.

Responsibilities

• Operate, tune, and build detections in Microsoft Sentinel (KQL) and Microsoft Defender XDR to detect, investigate, and respond to threats.
• Design and automate response with SOAR playbooks (Logic Apps / Sentinel) to reduce mean time to respond.
• Lead and coordinate hands-on incident response for data breaches, malware outbreaks, and identity compromises across cloud and on‑prem.
• Partner with Security and Risk leadership to translate policies and frameworks into enforceable controls.
• Develop, test, and validate disaster recovery and resilience strategies from a security perspective.
• Engineer and administer Microsoft Entra ID: CA, PIM, and hybrid identity management.
• Coordinate third-party penetration testing and remediate findings.

Skills

Microsoft Sentinel

Microsoft Defender

Entra ID

Azure

PowerShell

Python

Terraform

Bicep

ARM

IAM expertise

Incident response

Cloud security

Hybrid IT

Education

CEH

OSCP

AZ-500

SC-300

Tools

Logic Apps

KQL

Job description

System Soft Technologies seeks a hands-on Cybersecurity Administrator to join the Information Security team in Rosemont, IL. This role focuses on administering, hardening, and operating security controls across a hybrid Azure and on‑prem environment.

You will work on incident response, identity hardening, cloud security engineering, and vulnerability remediation, leveraging Defender XDR, Sentinel, Entra ID, and automation to strengthen security across the ecosystem.