Security Engineer (IT Security)

Gcore; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Flexible hours & hybrid/remote options

Global remote work up to 45 days/year

Private medical insurance

Extra vacation & sick leave

Language courses

Modern offices with snacks & events

Team sports & social activities

Job summary

HellaGoodAudio is seeking a Security Operations/Engineering professional in the United States. You will operate Defender XDR, Entra ID, and SIEM to protect networks and endpoints, while triaging incidents and improving controls.

You will run phishing defenses, manage access reviews, and help align with ISO/IEC 27001, SOC 2, and related standards. You will also lead security awareness programs, oversee audits, and review new third-party software with Legal teams, ensuring robust security across

Qualifications

• Experience in security operations or security engineering.
• Hands-on experience with the Microsoft security stack (Defender XDR, Entra ID, Intune, Exchange Online) and a SIEM.
• Solid understanding of networking and Windows, macOS, and Linux administration.
• Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks.
• Scripting skills for automation (PowerShell, Python, or Bash).
• Ability to explain security topics to non-technical audiences; fluent English.

Responsibilities

• Operate and automate security tooling to protect networks, systems, and apps.
• Monitor and triage security events, investigate incidents, and prepare incident reports.
• Handle phishing reports and maintain email protection controls.
• Plan and implement network security measures and define OS/network/service security requirements.
• Manage device security and compliance through MDM and track endpoint vulnerabilities remediation.
• Ensure access reviews and cleanup of groups/permissions.
• Run company-wide security awareness programs with training and phishing simulations.
• Control compliance with security standards and maintain related policies.
• Support audits (ISO/IEC 27001, SOC 2, PCI DSS) with evidence collection (Vanta).
• Review security of third-party software, SaaS, and AI tools with Legal.

Skills

Security operations

Defender XDR

Entra ID

Intune

SIEM

Networking concepts

Windows administration

macOS administration

Linux administration

Automation scripting

Tools

Defender XDR

Entra ID

Intune

Exchange Online

SIEM

Job description

What You’ll Do

Security Operations and Incident Response

• Operate and automate security tooling (Microsoft Defender XDR, Entra ID, Wazuh SIEM) to protect the company's network, systems, and applications.
• Monitor and triage security events, investigate incidents, and propose measures to prevent recurrence; prepare incident reports.
• Handle user-reported phishing and maintain email protection controls.
• Plan and implement network security measures and define security requirements for operating systems, networks, and services.

Endpoint and Access Security

• Manage device security and compliance through MDM (Intune, Kandji) and track remediation of endpoint vulnerabilities.
• Ensure access is granted based on business need; run periodic access reviews and cleanup of groups and permissions.

Security Awareness

• Run the company-wide security awareness program: training materials on current threats, phishing simulations with results reports, and security communications to employees.

Governance and Compliance

• Control compliance with corporate security standards and maintain related policies and procedures.
• Support internal and external audits (ISO/IEC 27001, SOC 2, BSI C5, PCI DSS), including evidence collection in Vanta and remediation of findings.
• Review the security of new third-party software, SaaS, and AI tools together with Legal.

What We’re Looking For

• Experience in security operations or security engineering.
• Hands‑on experience with the Microsoft security stack (Defender XDR, Entra ID, Intune, Exchange Online) and a SIEM.
• Solid understanding of networking and of Windows, macOS, and Linux administration.
• Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks.
• Scripting skills for automation (PowerShell, Python, or Bash).
• Ability to explain security topics to non-technical audiences; fluent English.

Nice to have:

• Experience with Vanta or a similar compliance automation platform.
• Relevant certifications (e.g., Microsoft SC-200, CompTIA Security+ / CySA+) are a strong advantage.

Benefits

At Gcore, we want you to do your best work and enjoy the journey. Our benefits are designed to support your growth, well-being, and life beyond work:

• Competitive compensation
• Flexible working hours and hybrid or remote options, depending on your role
• Work from anywhere in the world for up to 45 days per year
• Private medical insurance for you and your family*
• Extra paid vacation and sick leave days*
• Support for life’s important moments and celebrations
• Language courses to help you connect and grow
• Modern, welcoming offices with snacks, drinks, and entertainment*
• Team sports and social activities*

*Benefits may vary depending on your location.

Equal Opportunity Employer

We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.