Security Engineer

Hirenexus; Dayton (OH); Hybrid; USD 105,000 - 145,000; Full time

Job summary

Hirenexus is seeking a Security Engineer to own and build security across hybrid cloud and on-prem environments. You will partner with Infrastructure, Networking, DevOps, and business teams to manage vulnerabilities, respond to alerts, strengthen identity controls, and implement security playbooks.

Ideal candidates bring hands-on experience with vulnerability management, incident response, Microsoft 365 and Entra ID, and cloud security, with a track record of creating security programs from the

Qualifications

• Hands-on experience building or owning vulnerability management programs.
• Experience in incident response and security alert handling.
• Strong security knowledge across Microsoft 365, Entra ID, and cloud environments.

Responsibilities

• Own the vulnerability management program end-to-end.
• Lead incident response and root-cause analysis.
• Monitor and triage security alerts across multiple platforms.
• Manage identity and access security including SSO, MFA, and conditional access.
• Strengthen AWS security across multi-account environments.
• Coordinate penetration testing and remediation efforts.
• Collaborate with DevOps and development teams on security in CI/CD and secrets management.
• Support compliance requirements and maintain security evidence and documentation.

Skills

Vulnerability management

Incident response

Identity and access management

Cloud security

Security architecture

Microsoft 365 security

Entra ID / Active Directory

Education

Bachelor's degree in Information Security, Computer Science, Information Systems, or related field

Tools

CrowdStrike Falcon

Stellar Cyber

AWS GuardDuty

Microsoft Defender

GitHub

TeamCity

Argo CD

Kubernetes

AWS Secrets Manager

Terraform

Job description

The Security Engineer is responsible for owning and building our client's security function across a hybrid cloud and on-premises environment. This role partners closely with Infrastructure and Systems Operations, Networking, Desktop Support, Development, and business teams to manage vulnerabilities, investigate and respond to security alerts, strengthen identity and access controls, and put the right security practices in place to support the company's continued growth.

The ideal candidate is a hands-on security professional who can step in on day one and take ownership of the function with minimal direction. They bring strong experience in vulnerability management, incident response, Microsoft 365 and Entra ID, and cloud security, along with a track record of building processes and programs from the ground up rather than inheriting them.

Candidates will have the opportunity to work remotely or in a hybrid environment, with a preference for candidates located near facilities in Ohio or New Jersey. Occasional travel, roughly once per quarter, is expected.

Responsibilities

• Own the vulnerability management program, using tools such as Qualys VMDR to identify, assess, and prioritize risk, coordinate remediation with technical teams, and validate that fixes are complete.
• Monitor, triage, and investigate security alerts across CrowdStrike Falcon, Stellar Cyber, AWS GuardDuty, Microsoft 365, and Entra ID, addressing issues directly or engaging the appropriate teams to contain and remediate.
• Lead incident response efforts, including evidence preservation, root cause analysis, corrective action plans, and incident documentation.
• Take ownership of identity and access security across Entra ID, Microsoft 365, AWS, and third-party applications, including SSO, MFA, conditional access, privileged access, and periodic access reviews based on least privilege and separation of duties.
• Assess and strengthen AWS security across a multi-account Control Tower environment, including IAM, EC2, EKS, RDS, S3, CloudTrail, networking, and encryption.
• Coordinate penetration testing, external and internal vulnerability scanning, and remediation of findings across infrastructure, applications, and cloud platforms.
• Partner with Development and DevOps teams to address application, API, CI/CD, and secrets management risks across GitHub, TeamCity, Argo CD, Kubernetes, and AWS Secrets Manager.
• Support endpoint, email, and network security, including phishing investigations, firewall reviews, network segmentation, remote access security, and security awareness initiatives.
• Support PCI DSS, SOC 2, customer security assessments, cyber insurance requirements, and third-party vendor reviews by maintaining security evidence, policies, procedures, and control documentation.
• Establish security best practices, standards, playbooks, and metrics, including guidance on the secure use of AI tools, and communicate risk and progress clearly to technical teams and IT leadership.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field, or equivalent professional experience.
• 4+ years of hands-on experience in information security, cloud security, network security, or security engineering, with additional experience strongly preferred.
• Proven experience owning or building a vulnerability management program, including risk prioritization, remediation tracking, and penetration test follow-through.
• Hands-on experience investigating security alerts and responding to incidents using XDR, EDR, or SIEM platforms such as CrowdStrike Falcon, Stellar Cyber, Microsoft Defender, or similar tools.
• Strong working knowledge of Microsoft 365, Entra ID, Active Directory, MFA, SSO, and identity governance practices.
• Experience securing cloud environments, preferably AWS, including IAM, logging, and multi-account architectures.
• Understanding of Windows and Linux security, networking, firewalls, DNS, TLS, and common authentication protocols.
• Experience supporting compliance frameworks such as PCI DSS or SOC 2 is preferred; familiarity with Kubernetes, Terraform, CI/CD security, and Adobe Commerce or Magento environments is a plus.
• Security certifications such as Security+, CySA+, SSCP, CISSP, CCSP, or AWS Certified Security Specialty are preferred, though hands-on experience is valued over certification. PMP or other project management certifications are a plus.
• Self-directed, organized, and comfortable building processes from scratch in a growing organization, with strong communication skills and the ability to work effectively across technical and business teams.