Security Operations Engineer - Hybrid (Cloud, IAM & Compliance)

CRB; Denver (CO); Hybrid; USD 100,000 - 150,000; Full time

Job summary

CRB is seeking a Security Operations Engineer to strengthen security, privacy, and resilience across our enterprise environment. You will partner with IT, Legal, Compliance, and stakeholders to translate requirements into practical, scalable controls and processes.

The role involves cloud and on-prem security, IAM, SSO/MFA, endpoint protection, and vulnerability management, with a hybrid work model and in-office presence three days per week. A strong foundation in cybersecurity is required.

Qualifications

• Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, or a related field; equivalent experience.
• Minimum of 3 years of experience in cybersecurity, IT operations, infrastructure management, endpoint administration, enterprise applications, or a related discipline.
• Proven experience supporting enterprise endpoints, SaaS platforms, identity systems, and geographically distributed workforces.
• Experience with vulnerability management, penetration testing, incident response, network security analysis, and digital forensics.
• Experience administering Microsoft 365, Azure Entra ID, Intune, or comparable identity and endpoint management solutions.
• Working knowledge of SSO, SAML, MFA, privileged access management, access provisioning, and least-privilege principles.
• Demonstrated understanding of firewalls, intrusion detection and prevention systems, network security monitoring, operating system security, and common attack methodologies.
• Experience automating technical processes using Python, PowerShell, or similar scripting languages.
• Experience supporting audits, compliance reviews, technical documentation, evidence collection, and control testing.
• Working knowledge of GDPR and familiarity with German and Swiss privacy regulations.

Responsibilities

• Serve as CRB's primary technical liaison to Managed Security Services Providers (MSSPs), overseeing security operations activities, vulnerability assessments, remediation efforts, and third-party service delivery.
• Maintain and administer the enterprise security and privacy risk register, ensuring risks are identified, assessed, tracked, mitigated, and reported in accordance with established governance processes.
• Develop, maintain, and enhance security policies, standards, procedures, control documentation, runbooks, user guidance, and incident response documentation in partnership with Security, Compliance, and Technology leadership.
• Lead audit readiness and compliance activities by coordinating evidence collection, validating control effectiveness, supporting assessments, and maintaining comprehensive audit documentation, including access records, change records, vulnerability findings, incident documentation, and remediation evidence
• Implement, administer, and continuously improve security controls across cloud environments, SaaS platforms, and enterprise systems.
• Own identity and access management processes, including Azure Entra ID, single sign-on (SSO), multifactor authentication (MFA), privileged access management, provisioning, and deprovisioning activities.
• Support endpoint security, patch management, device compliance, configuration management, and asset lifecycle operations.
• Maintain accurate inventories of technology assets, applications, user accounts, licenses, data flows, and system ownership.
• Partner with IT teams and business stakeholders to improve secure configuration management, vulnerability remediation, backup and recovery capabilities, and operational resilience.
• Evaluate new technologies, vendors, integrations, and data management practices to ensure alignment with security and privacy requirements.
• Automate security and operational workflows using tools such as Python, PowerShell, Power Automate, Jira Automation, or comparable technologies.
• Support security monitoring, incident investigation, containment, response, recovery, and continuous improvement activities.

Job description

CRB is seeking a Security Operations Engineer to strengthen security, privacy, and resilience across our enterprise environment. You will partner with IT, Legal, Compliance, and stakeholders to translate requirements into practical, scalable controls and processes.

The role involves cloud and on-prem security, IAM, SSO/MFA, endpoint protection, and vulnerability management, with a hybrid work model and in-office presence three days per week. A strong foundation in cybersecurity is required.