Senior Security Engineer

Novva Inc.; West Jordan (UT); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Comprehensive health, dental, and vision insurance

401k with company match

PTO

Job summary

Novva Inc. is seeking a highly skilled Senior Security Engineer to lead the design and operation of cybersecurity technologies. This role involves close collaboration with various teams to ensure the security of enterprise and customer-facing systems.

The ideal candidate will have extensive experience in security engineering and a strong background in Microsoft security tools, alongside a degree in IT or Cybersecurity. The position offers comprehensive benefits including health insurance and a 401k with company match.

Qualifications

• 7+ years of cybersecurity experience.
• 5+ years of security engineering experience.
• Experience administering Microsoft security technologies.

Responsibilities

• Lead incident response activities.
• Design and implement enterprise security technologies.
• Develop security documentation including policies and procedures.

Skills

Cybersecurity expertise

Security engineering

Microsoft security technologies

Networking

Active Directory

Incident response

Threat detection

Education

Bachelor's degree in Information Technology, Cybersecurity, or related field

Tools

Microsoft Defender XDR

SIEM

PowerShell

Python

ServiceNow

Job description

Position Summary

NOVVA Data Centers is seeking a highly skilled Senior Security Engineer to lead the design, implementation, and operation of cybersecurity technologies that protect our enterprise, customer-facing systems, and mission-critical data center environments. This position serves as the technical cybersecurity lead and works closely with IT, Networking, Data Center Operations, Physical Security, Compliance, and leadership to define scope and prioritization. The ideal candidate combines strong engineering expertise with operational security experience and thrives in a fast-paced, highly available infrastructure environment.

Primary Responsibilities

Security Engineering

• Design, implement, and maintain enterprise security technologies
• Lead deployment and management of:
  • Microsoft Defender XDR
  • Microsoft Entra ID security
  • Privileged Identity Management (PIM)
  • Conditional Access
  • Defender for Cloud
  • Defender for Endpoint
  • Email Security
  • Vulnerability Management platforms
• Engineer secure cloud and hybrid infrastructure across Microsoft 365 and AWS
• Develop security standards and hardening baselines

Security Operations

• Lead incident response activities
• Investigate security alerts and indicators of compromise
• Perform threat hunting activities
• Conduct forensic investigations when required
• Coordinate response to cybersecurity incidents

Risk & Compliance

Support and maintain compliance with:

• HITRUST
• SOC 2
• ISO 27001
• PCI DSS
• HIPAA
• Internal security audits

Develop security documentation including:

• Policies
• Standards
• Procedures
• Technical runbooks

Vulnerability Management

• Manage enterprise vulnerability scanning
• Prioritize remediation activities
• Coordinate patch management with infrastructure teams
• Track remediation metrics

Identity & Access Management

• Manage privileged access
• Review permissions and access controls
• Implement Zero Trust principles
• Support identity lifecycle processes

Security Architecture

• Participate in infrastructure design reviews
• Evaluate new technologies
• Perform security risk assessments
• Recommend security improvements

Leadership

• Mentor junior security staff
• Provide technical guidance
• Evangelize strong security practices
• Participate in after-hours incident response
• Support cybersecurity roadmap initiatives

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience)
• 7+ years of cybersecurity experience
• 5+ years of security engineering experience
• Experience administering Microsoft security technologies
• Experience with SIEM, EDR, IAM, and vulnerability management platforms
• Strong understanding of:
  • Networking
  • Active Directory
  • Microsoft 365
  • Windows Server
  • Linux
  • Firewalls
  • DNS
  • VPN
  • Zero Trust Architecture

Preferred Qualifications

One or more of:

• CISSP
• GIAC certifications
• GSEC
• GCIA
• GCIH
• Azure Security Engineer
• Microsoft Security certifications

Experience with:

• ServiceNow
• PowerShell
• Python
• Infrastructure as Code
• SIEM/SOAR platforms
• Vulnerability & Patch management
• Operational Technologies
• Data center operations

Core Competencies

• Security Architecture
• Incident Response
• Threat Detection
• Security Engineering
• Risk Management
• Communication
• Project Leadership
• Continuous Improvement

Benefits

• Comprehensive health, dental, and vision insurance
• 401k with company match
• PTO