Senior Security Engineer — Network & Cloud Defense

JW Affinity IT; Town of Charlotte (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Retirement Plan (401k) with matching

Life Insurance Plan

PTO

Short Term & Long-Term Disability

Internet & Phone Allowance

Wellness Resources (EAP)

Pet Insurance

Work-Life balance

Flexible Hours

Full-Time Permanent Positions

Job summary

JW Affinity IT in Charlotte, NY is seeking a senior-level Security Engineer to help protect information systems, networks, applications, and data across a municipal technology environment. You will implement security controls, monitor threats, investigate incidents, and support compliance within a multi-department setting.

The ideal candidate has broad security engineering experience across network, endpoint, identity, cloud, and server environments and can translate security requirements into

Qualifications

• Seven or more years of information technology experience, including at least five years focused on cybersecurity engineering, security operations, or infrastructure security.
• Hands-on experience with enterprise security tools such as SIEM, EDR/XDR, vulnerability scanners, firewalls, identity-security platforms, and email-security systems.
• Strong understanding of network security, endpoint security, identity and access management, cloud security, encryption, logging, and vulnerability management.
• Experience investigating security incidents and coordinating technical response and recovery activities.
• Working knowledge of security frameworks and standards such as NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, or ISO/IEC 27001.
• Ability to analyze technical risks and communicate findings to technical teams, management, and nontechnical stakeholders.
• Experience developing security procedures, technical standards, incident documentation, and remediation plans.
• Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or an equivalent combination of education, certifications, and experience.

Responsibilities

• Design, implement, configure, and maintain enterprise cybersecurity tools and technical controls.
• Administer or support SIEM, endpoint detection and response, vulnerability management, email security, multifactor authentication, identity protection, firewalls, and network-security platforms.
• Monitor and investigate security alerts, suspicious activity, unauthorized access, malware, phishing, and potential data exposure.
• Lead or support incident triage, containment, eradication, recovery, documentation, and post-incident review.
• Conduct vulnerability scans, evaluate findings, prioritize remediation, and validate corrective actions.
• Perform security reviews of systems, applications, configurations, cloud services, and proposed technology solutions.
• Develop and maintain detection rules, alerts, dashboards, response procedures, and security automation.
• Strengthen identity and access management, privileged access, network segmentation, endpoint security, and cloud-security controls.
• Collaborate with infrastructure, network, application, and help-desk teams to securely configure and maintain technology systems.
• Support security assessments, audits, risk reviews, and compliance activities.
• Maintain security documentation, architecture diagrams, incident records, control evidence, and remediation plans.
• Assist with disaster recovery, continuity-of-operations, tabletop exercises, and incident-response testing.
• Evaluate emerging threats and recommend appropriate risk-reduction measures.
• Provide technical guidance and security-awareness support to IT personnel and municipal stakeholders.
• Participate in an after-hours incident-response or on-call rotation when required.

Skills

Security engineering

Security operations

Infrastructure security

Incident response

Network security

Endpoint security

Cloud security

Identity & access management

Encryption

Education

Bachelor’s degree in cybersecurity, computer science, information technology, engineering, or related field

Tools

SIEM

EDR/XDR

Vulnerability scanners

Firewalls

Identity-security platforms

Email-security systems

Job description

JW Affinity IT in Charlotte, NY is seeking a senior-level Security Engineer to help protect information systems, networks, applications, and data across a municipal technology environment. You will implement security controls, monitor threats, investigate incidents, and support compliance within a multi-department setting.

The ideal candidate has broad security engineering experience across network, endpoint, identity, cloud, and server environments and can translate security requirements into