Cybersecurity Engineer ( W2 direct hire, no C2C )

System One; Pittsburgh (Allegheny County); On-site; USD 90,000 - 120,000; Full time

Job summary

System One is seeking a Cybersecurity Engineer to secure enterprise infrastructure and respond to cyber threats. The role requires experience managing security compliance and implementing security controls, particularly with Microsoft 365 security technologies.

Key responsibilities include vulnerability assessments, monitoring for security incidents, and configuring security tools. The ideal candidate will have over 5 years in IT security and experience in regulated industries. A competitive salary and benefits package are offered.

Qualifications

• At least 5+ years of hands-on IT security/cybersecurity engineering experience.
• Strong experience implementing security controls and solutions.
• Experience with projects for highly regulated industries such as healthcare or banking.

Responsibilities

• Secure enterprise infrastructure and respond to cyber threats.
• Implement and maintain security controls across environments.
• Manage security compliance and assist in policy creation.
• Monitor and respond to security alerts and incidents.
• Conduct vulnerability assessments and security hardening.

Skills

Microsoft 365 security technologies

Cybersecurity frameworks

Firewall technologies

VPN technologies

Endpoint detection & response (EDR)

Vulnerability management tools

Tools

Microsoft Defender

Intune

Azure AD

Conditional Access

Purview

Exchange Online Protection

Job description

Cybersecurity Engineer

Responsibilities:

• This role is responsible for securing enterprise infrastructure, responding to cyber threats, administering Microsoft 365 security, and ensuring compliance with applicable regulatory requirements.
• Implement and maintain enterprise security controls across cloud and on-premises environments.
• Manage security compliance and assist in security policy creation.
• Monitor and respond to security alerts, incidents, phishing attempts, malware, and suspicious activity.
• Perform vulnerability assessments, remediation tracking, and security hardening.
• Manage endpoint protection systems, email security, MFA, Conditional Access, and identity security controls.
• Configure and maintain SIEM, logging, and monitoring platforms.
• Conduct threat hunting and proactive security reviews.
• Administer Microsoft 365 security tools including Microsoft Defender, Entra ID (Azure AD), Conditional Access, Intune, Purview, Exchange Online Protection.
• Implement DLP, retention, and email security policies.
• Secure remote access, mobile devices, and hybrid cloud infrastructure.
• Secure firewalls, VPNs, wireless networks, switches, and servers.
• Review firewall rules and network segmentation.
• Support backup, disaster recovery, and business continuity initiatives.
• Assist with patch management and secure configuration baselines.
• Provide escalation support for security-related help desk issues.
• Lead response efforts during security incidents and outages.
• Conduct user security awareness training and phishing simulations.

Required Qualifications

• Experience on projects for HUD, civilian U.S. federal agencies, or highly regulated industries such as insurance, banking, or healthcare.
• Experience implementing security controls and solutions from scratch with strong knowledge of best practices.
• At least 5+ years of hands‑on IT security/cybersecurity engineering experience.
• Strong experience with Microsoft 365 security technologies.
• Experience with firewalls and VPN technologies, endpoint detection & response (EDR), email security platforms, vulnerability management tools, Windows Server and hybrid Active Directory, and knowledge of cybersecurity frameworks and compliance standards.

Preferred Qualifications

• Certifications such as CISSP, Security+, SC-200, SC-300, AZ-500, CEH.