Cloud Security & Incident Response Lead

Kuvare; Des Moines (IA); On-site; USD 100,000 - 125,000; Full time

Job summary

Kuvare is seeking a Security Administrator to join our Information Security team in a role that blends hands‑on engineering with incident response and cloud security engineering. You will operate detections, automate responses, and drive hardening across hybrid Azure/On‑Prem environments.

The ideal candidate brings deep Defender XDR/Entra ID experience and a track record of secure engineering in complex environments.

Qualifications

• 7+ years IT experience with at least 3 years in cybersecurity.
• 4+ years on Microsoft technologies in hands‑on administration, engineering or operations.
• Advanced cybersecurity certifications (CEH, OSCP, AZ‑500, SC‑300, SC‑200, SC‑100).
• Deep knowledge of Defender, Intune, Sentinel, and Entra ID to operate in a live environment.
• Extensive experience operating hybrid cloud security architecture and controls.
• Strong background in security tooling administration, configuration, and tuning.
• Proven experience with endpoint security and modern device management (Intune).
• Advanced knowledge of network security concepts, including VPNs, firewalls, and SASE.
• Demonstrated experience leading security monitoring, incident response, and day‑to‑day security operations.

Responsibilities

• Operate, tune, and build detections in Microsoft Sentinel and Defender XDR.
• Design and automate incident response with SOAR playbooks.
• Lead hands‑on incident response for data breaches, malware, and identity incidents.
• Translate policies into enforceable controls with Security and Risk leadership.
• Develop, test, and validate disaster recovery and resilience strategies.

Skills

Incident Response

Microsoft Sentinel

Defender XDR

SOAR/Logic Apps

Entra ID

Hybrid Cloud Security

Security Tooling

Endpoint Security

Network Security

PowerShell

Python

Terraform

RBAC

Vulnerability Management

Tools

Microsoft Defender XDR

Intune

Azure

Entra ID

Job description

Kuvare is seeking a Security Administrator to join our Information Security team in a role that blends hands‑on engineering with incident response and cloud security engineering. You will operate detections, automate responses, and drive hardening across hybrid Azure/On‑Prem environments.

The ideal candidate brings deep Defender XDR/Entra ID experience and a track record of secure engineering in complex environments.