Senior Information Security Engineer

Cybersecurity Jobs; Village of Bronxville (NY); On-site; USD 102,000 - 132,000; Full time

Benefits offered by this job

Health insurance

401(k) with employer contributions

8 holidays

Tuition assistance

Stock purchase opportunities

Disability insurance

Job summary

Saab is seeking a Senior Information Security Engineer to secure Windows environments and deliver security solutions for customers. You will configure and harden Windows Server/workstations, manage AD security, and implement RBAC and least-privilege access. The role involves endpoint protection, security assessments, and documenting configurations for customer sites.

Travel up to 30% may be required; a DoD clearance is preferred. Onsite in De Witt, NY with strong collaboration across teams.

Qualifications

• Bachelor’s degree in Information Security, CS, IT, or equivalent experience.
• 8+ years of experience securing Microsoft Windows environments.
• Hands-on Active Directory administration experience.
• Experience creating and managing GPOs.
• Experience implementing RBAC and identity management.
• Experience deploying or managing endpoint protection/antivirus.
• Strong Windows security architecture and system hardening knowledge.
• Experience with security assessments and remediation.

Responsibilities

• Leverage GPOs to enforce security configurations and standards.
• Configure, administer, and harden Windows Server and workstations.
• Implement Active Directory security configurations and RBAC models.
• Deploy and manage endpoint protection and antivirus solutions.
• Perform security assessments and remediation for Windows environments.
• Document configurations, controls, and deployment steps for customers.
• Provide technical guidance and knowledge transfer to customers.

Skills

Microsoft Windows

Active Directory administration

GPOs

RBAC

Endpoint protection

Antivirus

System hardening

Security assessments

PowerShell

Ansible

JIRA

SIEM

DoD clearance (preferred)

Education

Bachelor’s degree in Information Security

Tools

Microsoft Hyper-V

Splunk

PDQ

RSA Authentication Manager

JIRA

Job description

Senior Information Security Engineer role with a focus on securing Windows-based environments and delivering security solutions for customers.

Responsibilities

• Group Policy Objects (GPOs) to enforce security configurations and organizational standards
• Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments
• Implement and maintain Active Directory security configurations, including user and group management, OU structures, and policy enforcement
• Design and implement role-based access control (RBAC) and least-privilege access models
• Deploy, configure, and manage endpoint protection and antivirus solutions
• Apply system hardening practices aligned with industry security frameworks and best practices
• Perform security assessments of Windows environments and implement remediation actions
• Support creation of secure configurations, patch processes, and compliance with security policies
• Document system configurations, security controls, and deployment procedures for customer environments
• Provide technical guidance and knowledge transfer to customer stakeholders when appropriate

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
• 8+ years of experience administering and securing Microsoft Windows environments
• Strong hands‑on experience with Active Directory administration
• Proven experience creating and managing GPOs
• Experience implementing RBAC and identity management practices
• Hands‑on experience deploying or managing endpoint protection / antivirus platforms
• Solid understanding of Windows security architecture and system hardening techniques
• Experience performing security assessments and remediation

Desired Tool Experience

• Microsoft Hyper‑V Virtualization
• Splunk
• PDQ
• RSA Authentication Manager

Preferred Qualifications

• Experience with Ansible or PowerShell scripting and automation
• Familiarity with security monitoring tools and SIEM platforms
• Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001
• Experience supporting enterprise or multi‑tenant environments
• Experience with protecting data at rest
• Experience with stakeholder management
• Current DoD clearance preferred
• Experience with JIRA is preferred
• Relevant certifications: CompTIA Security+, CISSP, Microsoft security or identity certifications, GIAC

Technologies

• Microsoft Windows
• Active Directory
• Group Policy Objects (GPOs)
• Group Policy management
• Role‑based access control (RBAC)
• Endpoint protection
• Antivirus
• Microsoft Hyper‑V Virtualization
• Splunk
• PDQ
• RSA Authentication Manager
• PowerShell
• Ansible
• SIEM
• NIST
• CIS Benchmarks
• ISO 27001
• JIRA
• CompTIA Security+
• CISSP
• GIAC

Location and Travel

• De Witt, NY (onsite)
• Travel up to 30% may be required

Salary

• USD 101,600 - 132,000 per year

Benefits

• Medical, vision, and dental insurance for employees and dependents
• Generous paid time off, including 8 designated holidays
• 401(k) with employer contributions
• Tuition assistance and student loan assistance
• Wellness and employee assistance resources
• Employee stock purchase opportunities
• Short-term and long-term disability coverage

Citizenship and Security Requirements

• Must be a U.S. citizen
• Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information

Drug‑Free Workplace

• Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug‑free workplaces
• Condition of employment includes passing a pre‑employment drug screen