IT Security Engineer

Gravity IT Resources; Salt Lake City (UT); On-site; USD 100,000 - 130,000; Full time

Job summary

Gravity IT Resources seeks a Senior IT Security Engineer in the Salt Lake City area to design, implement, and operate enterprise cybersecurity controls across on‑premises and cloud environments.

The role balances engineering, operational security, and project delivery, collaborating with IT Infrastructure, Network Operations, Cloud Operations, and Security Operations teams to strengthen the organization’s security posture. Requires 5–8 years in cybersecurity with Microsoft security expertise.

Qualifications

• 5–8 years of cybersecurity engineering or related experience.
• Experience with EDR, SIEM, IAM, and vulnerability management.
• Strong knowledge of Microsoft security technology: Defender, Entra ID, Intune, Azure security services.
• Experience in incident response and security investigations.
• Familiarity with NIST CSF, CIS Controls, and Zero Trust.

Responsibilities

• Design, implement, and maintain cybersecurity technologies across endpoint, network, cloud, and identity platforms.
• Evaluate, deploy, and optimize security tools and controls to improve the organization’s security posture.
• Develop and maintain cybersecurity standards, architectures, and technical roadmaps.
• Partner with IT teams to ensure security controls are integrated into infrastructure and application designs.
• Support security monitoring, threat detection, and incident response activities.
• Investigate security alerts, identify root causes, and assist with containment and remediation.

Skills

EDR

SIEM

IAM

Vulnerability management

Cloud security

PowerShell

Python

Microsoft Defender

Entra ID

Zero Trust

Threat monitoring

Education

Bachelor’s Degree in Cybersecurity

Tools

Microsoft Defender

Entra ID (Azure AD)

Intune

Azure security services

Job description

Job Title: Sr IT Security Engineer

Location: Onsite

Job Type: Direct Hire

Salary Range: $100k-$130k

Position Overview

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and operation of enterprise cybersecurity technologies and services. They are responsible for strengthening the organization’s security posture through the deployment, administration, and optimization of security controls across on-premises, cloud, and hybrid environments. They serve as a technical leader within the Cybersecurity team, partnering closely with IT Infrastructure, Network Engineering, Cloud Operations, Application Development, and Security Operations teams to ensure security controls are effectively implemented and maintained. This role supports both operational security activities and strategic security initiatives, helping to reduce risk through automation, engineering excellence, and continuous improvement.

This position requires a strong technical foundation across multiple security domains, including endpoint security, identity and access management, cloud security, network security, vulnerability management, and security monitoring. The ideal candidate can balance engineering, operational support, and project execution while driving security best practices throughout the organization.

Responsibilities

• Design, implement, and maintain cybersecurity technologies across endpoint, network, cloud, and identity platforms
• Evaluate, deploy, and optimize security tools and controls to improve the organization’s security posture
• Support the development and implementation of cybersecurity standards, architectures, and technical roadmaps
• Partner with IT teams to ensure security controls are integrated into infrastructure and application designs
• Support security monitoring, threat detection, and incident response activities
• Investigate security alerts, identify root causes, and assist with containment and remediation efforts
• Develop and maintain operational procedures, runbooks, and response documentation
• Participate in incident response exercises and continuous improvement initiatives
• Implement and support IAM capabilities, including identity lifecycle management, authentication, authorization, and privileged access controls
• Manage role-based access controls, multifactor authentication, conditional access, and identity governance processes
• Support periodic access reviews, entitlement management, and segregation of duties initiatives
• Partner with application and infrastructure teams to integrate IAM solutions and automate identity processes
• Support the vulnerability management program through assessment, prioritization, tracking, and remediation validation
• Collaborate with system owners to remediate vulnerabilities and reduce cyber risk
• Analyze security findings and recommend appropriate compensating controls or risk reduction measures
• Track remediation progress and support risk reporting activities
• Design and implement security controls for Microsoft Azure, Microsoft 365, and hybrid environments
• Support cloud security monitoring, configuration reviews, and hardening efforts
• Evaluate cloud architectures and services to ensure alignment with security requirements
• Implement security best practices for infrastructure, applications, and data protection
• Identify opportunities to automate security processes and improve operational efficiency
• Develop metrics, dashboards, and reporting to support cybersecurity decision-making
• Maintain technical documentation, standards, and operational procedures
• Stay current on emerging threats, technologies, and industry best practices

Requirements

• Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, or related field
• 5-8 years of experience in cybersecurity engineering, security operations, or infrastructure security
• Experience managing and supporting enterprise security technologies, including EDR, SIEM, IAM, vulnerability management, and cloud security platforms
• Strong knowledge of Microsoft security technologies, including Microsoft Defender, Entra ID (Azure AD), Intune, and Azure security services
• Experience supporting incident response, vulnerability management, and security investigations
• Knowledge of cybersecurity frameworks and best practices such as NIST CSF, CIS Controls, and Zero Trust principles
• Experience scripting or automating security processes using PowerShell, Python, or similar technologies preferred
• Strong troubleshooting, analytical, and problem-solving skills
• Excellent communication and collaboration skills with both technical and non-technical stakeholders
• Industry certifications such as CISSP, GSEC, Security+, Azure Security Engineer (AZ-500), or similar preferred

Employment Eligibility

Gravity cannot transfer nor sponsor a work visa for this position. Applicants must be eligible to work in the U.S. for any employer directly (we are not open to contract or “corp to corp” agreements).

Equal Employment Opportunity Statement

Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.