Security Engineer - Hybrid, Cloud & IR for Rail Tech

Sperry Rail, Inc.; Shelton (CT); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Sperry Rail, Inc. seeks an experienced security engineer to join our Global IT Security team. You will own vulnerability management, incident response, and IAM configurations across Microsoft 365 and Entra ID in a hybrid work setting.

You will advance the security program, mature runbooks, and metrics while collaborating across infrastructure and endpoints. Prior rail/industrial security or ISO 27001 exposure is a bonus.

Qualifications

• Five or more years in systems administration or IT infrastructure with a security focus.
• Solid foundational knowledge of Windows Server and desktop environments.
• Hands-on cloud infrastructure experience in Azure or AWS, across both.
• Experience managing Microsoft 365 and identity/configuration.
• Experience with enterprise security appliances (firewalls/routers).
• Practical vulnerability management, remediation coordination, and cross-team collaboration.
• Scripting for automation (PowerShell, Python, or similar).
• Direct experience with Rapid7, SentinelOne, or equivalent security/XDR platforms.
• Experience with central IT management platforms (e.g., ConnectWise Automate).
• Security certifications (CISSP, CISM, Security+ etc.) or equivalent demonstrated competency.

Responsibilities

• Own deployment, configuration, and monitoring of vulnerability management in a Windows environment.
• Monitor and tune endpoint detection, lead response to findings.
• Perform root-cause analysis of security incidents and drive corrective actions.
• Coordinate penetration testing and remediation with external partners.
• Maintain security runbooks, asset inventories, and incident logs.
• Administer and harden Microsoft 365 and Entra ID configurations.
• Support device management and cross-enterprise access controls.
• Align IT processes with ISO 27001 and assist in security questionnaires.
• Develop and report security posture KPIs to leadership.
• Operate security appliances and use central IT management platforms.

Skills

IT security

Windows security

Cloud security (Azure/AWS)

Microsoft 365 / Entra ID

Firewalls and routers

Vulnerability management

Automation scripting

Rapid7 / XDR platforms

Central IT management tools

Security certifications (CISSP/CISM/+)

Education

Bachelor’s in Cybersecurity or related field

Cybersecurity certifications encouraged

Tools

Rapid7

SentinelOne

ConnectWise Automate

Intune

Azure

AWS

Microsoft 365

Job description

Sperry Rail, Inc. seeks an experienced security engineer to join our Global IT Security team. You will own vulnerability management, incident response, and IAM configurations across Microsoft 365 and Entra ID in a hybrid work setting.

You will advance the security program, mature runbooks, and metrics while collaborating across infrastructure and endpoints. Prior rail/industrial security or ISO 27001 exposure is a bonus.