Security Engineer

Managed Group; Belcamp (MD); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Medical, dental, and vision insurance,

Training reimbursements

401(k) company match

15 days PTO

Short-term disability

Job summary

MNS Group is a cybersecurity-focused IT partner providing MSP, MSSP, and Compliance Services. The Security Engineer will implement and improve security controls across client environments and internal MSG infrastructure, supporting incident response, endpoint security, and vulnerability remediation.

You will prioritize risk, document actions clearly, and apply security standards while coordinating with clients and leadership.

Qualifications

• 4–6 years of technical IT experience, including 2+ years of security experience.
• Strong troubleshooting across Windows endpoints, identity/auth issues (MFA, CA), and Microsoft 365 security configurations.
• Experience with log analysis, security alert triage, and incident response preferred.
• Bachelor's degree in cybersecurity, information technology, computer science, or related field; CompTIA Security+ required; CySA+ or SC-200 preferred.

Responsibilities

• Monitor and respond to security alerts across endpoint, email, identity, and cloud platforms.
• Triage and investigate phishing, malware, and access attempts; containment and remediation actions.
• Configure Defender for Endpoint and Defender for Office; manage MFA, CA, and SSO integrations.

Skills

Troubleshooting

Windows endpoints

MFA & CA

Log analysis

SIEM familiarity

PowerShell

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM platforms

Microsoft Defender for Endpoint

Intune

PowerShell

Job description

MNS Group is a cybersecurity-focused IT Partner providing MSP, MSSP, and Compliance Services. Our security guidance and deep federal experience help government contractors solve critical network security and compliance issues to win contracts and secure our nation.

About the role:

The Security Engineer is responsible for implementing, maintaining, and improving security controls across client environments as well as maintaining internal MSG infrastructure. This role supports incident response, endpoint security, Microsoft 365 security configuration, vulnerability remediation, and compliance execution (ex: NIST / CMMC readiness).

This position requires strong technical ownership, sound judgment, and the ability to operate independently across multiple client environments and MNS internal infrastructure. The Security Engineer is expected to take responsibility for issues through resolution, maintain clear and accurate documentation, communicate effectively with technical and non-technical stakeholders, and consistently apply established security standards and best practices. This role requires the ability to prioritize competing demands, identify and elevate risk appropriately, and contribute to the continued improvement and standardization of MNS security processes, tooling, and client security baselines.

What you'll do

Security Operations & Response

• Monitor and respond to security alerts across endpoint, email, identity, and cloud platforms
• Triage and investigate suspicious activity (phishing, malware, lateral movement indicators, unauthorized access attempts)
• Perform containment actions (isolation, credential resets, policy changes, IOC blocking)
• Coordinate escalation and communication with internal leadership and clients as needed
• Participate in post-incident reviews and recommend improvements

Endpoint Security & Hardening

• Ensure endpoints meet baseline security standards (patching, encryption, AV/EDR coverage, least privilege), both for clients and internal MSG standards
• Support remediation of malware and persistent threats
• Manage and enforce device compliance policies through Intune (where applicable)

Microsoft 365 Security

• Configure and support Microsoft Defender security controls (Defender for Endpoint, Defender for Office, etc.)
• Support M365 identity protection: MFA, Conditional Access, SSO integrations, risky sign-in remediation
• Secure Exchange Online (anti-phishing policies, mail flow rules, quarantine management)
• Support secure SharePoint/OneDrive access controls and external sharing governance
• Assist with secure tenant configurations and security posture improvements

Vulnerability Management & Remediation

• Run or support vulnerability scans and interpret results
• Prioritize remediation based on risk and business impact
• Coordinate patching and configuration changes with IT and client stakeholders
• Validate remediation actions and document outcomes

Compliance & Security Framework Execution

• Support client security initiatives aligned to frameworks such as NIST 800-171 / CMMC, as it relates to GovCon Managed Services
• Maintain security-related documentation
• Help standardize baseline security controls across environments

Documentation, Standards, and Process Improvement

• Create and maintain SOPs, security runbooks, and client security documentation in ITGlue
• Maintain accurate ticket notes, investigation details, and remediation steps
• Identify repeat security issues and propose standard improvements
• Improve internal consistency for security baselines, tool usage, and escalation procedures

Qualifications:

• 4–6 years of technical IT experience, including 2+ years of security experience.
• Strong troubleshooting ability across:
• Windows endpoints and common security failure modes
• Identity and authentication issues, including MFA, Conditional Access, and account compromise
• Microsoft 365 security configurations
• Working knowledge of:
• TCP/IP, DNS, VPNs, and firewall concepts
• Common attack vectors, including phishing, credential theft, and ransomware
• Endpoint hardening and patch management best practices
• Experience supporting:
• Microsoft Entra ID administration and security controls
• Log analysis, security alert triage, and investigation
• Familiarity with NIST SP 800-171 and CMMC requirements.
• Experience with SIEM platforms, PowerShell or another scripting language, vulnerability management, incident response, and security-control implementation preferred.
• Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience.
• CompTIA Security+ certification required; additional security certifications such as CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate (SC-200) preferred.

Pre-employment Requirements:

Employment is contingent upon completing a background check and a drug test. Skills testing may be required during the interview process. Lifting equipment weighing 25 lbs. may be required. Compensation is based on experience.

Due to sensitive government data that employees may come in contact with, this role requires compliance with federal regulations, including ITAR/EAR, which mandate U.S. citizenship.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Why Managed Group?

Well, for one, we care about you as a professionalanda person. You will join a team of driven, compassionate, friendly experts and visionary leaders who enjoy a challenge. Are you driven to do better every day? Same. We have your back by offering:

• Competitive salary
• Medical, dental, and vision insurance, with HSA Health Insurance option
• Reimbursement for training and pursuit of advanced certifications.
• Company match on voluntary pretax salary contributions
• 15 days of Paid Time Off (PTO)
• 100% company-paid short-term disability