Security Engineer — IT & Infrastructure (Industrial Rail)

Sperry Rail, Inc.; Shelton (CT); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Sperry Rail, Inc. is seeking a Security Engineer to own deployment, configuration, and monitoring of our vulnerability management across a predominantly Windows environment.

The role partners with our Global IT team to mature incident handling, asset inventories, and runbooks while building cloud and infrastructure security skills. You will manage identity and access in Microsoft 365 and Entra ID, support device management, and contribute to governance, compliance, and security metrics.

Qualifications

• Five or more years in systems administration or IT infrastructure with a strong security focus.
• Solid knowledge of Windows Server and desktop environments.
• Hands-on cloud infrastructure experience in Azure or AWS, across both.
• Experience with Microsoft 365 identity and access configuration.
• Experience with enterprise security appliances (firewalls/routers).
• Vulnerability management experience including remediation coordination.

Responsibilities

• Own deployment, configuration, and monitoring of vulnerability management across Windows environment.
• Monitor endpoint detection and response coverage and lead incident responses.
• Perform root cause analysis on security incidents and drive corrective actions.
• Scope and coordinate external penetration testing and remediation.
• Maintain security runbooks, asset inventories, and incident logs.
• Collaborate with infrastructure team to improve security posture.

Skills

Windows Server

Cloud infrastructure

Microsoft 365 Identity

Vulnerability management

Scripting (PowerShell/Python)

Security decision making

Education

Bachelor's degree in cybersecurity or related field

Tools

Rapid7

SentinelOne

ConnectWise Automate

Job description

Sperry Rail, Inc. is seeking a Security Engineer to own deployment, configuration, and monitoring of our vulnerability management across a predominantly Windows environment.

The role partners with our Global IT team to mature incident handling, asset inventories, and runbooks while building cloud and infrastructure security skills. You will manage identity and access in Microsoft 365 and Entra ID, support device management, and contribute to governance, compliance, and security metrics.