Security Engineer

Security Engineer Location: Greensboro, NC Compensation: $95,000 - $115,000 Position summary The Security Engineer is a technical role responsible for designing, implementing, and operating core security controls across the organization’s infrastructure and cloud platforms. This role serves as the owner for key security tooling and processes (for example, endpoint protection, logging and monitoring, vulnerability management, and secure configurations) and works closely with Network, Systems, and IAM teams to ensure secure, compliant, and efficient operations. The Security Engineer II supports Identity and Access Management (IAM) workflows and policies but does not serve as the primary IAM program owner. Key responsibilities Design, implement, and maintain security controls for networks, servers, endpoints, and cloud services, including firewalls, endpoint protection, email/web security, and VPN/remote access. Own the configuration, operation, and tuning of core security tools (for example, endpoint protection, log collection/monitoring, vulnerability scanning), including health checks, upgrades, and effectiveness reviews. Work with Network Administrators, Network Engineers, and Systems Administrators to ensure new infrastructure deployments follow standardized security baselines and hardening guidelines. Develop and maintain security standards, diagrams, and technical documentation for security architectures and controls. Monitor security alerts and logs (identity, endpoint, email, network) using established tools and escalate or respond according to documented runbooks. Investigate security incidents involving endpoints, servers, and user accounts; perform containment and recovery activities in coordination with infrastructure and IAM teams. Coordinate periodic vulnerability scans and patching campaigns, working with system and application owners to remediate findings within defined SLAs. Contribute to post incident reviews by documenting root cause, corrective actions, and improvements to controls and processes. Implement and maintain technical controls required by organizational security policies and applicable frameworks (for example, NIST/CMMC) in partnership with IT leadership and security/IAM stakeholders. Support internal and external audits of security controls by providing technical evidence, documentation, and explanations of how controls are implemented. Collaborate with Project Managers, business unit IT contacts, and application owners to embed security requirements into projects and change initiatives. Contribute to security awareness efforts by providing technical input related to secure configurations, endpoint security, and authentication practices. Support IAM operations in Entra ID/Azure AD, on prem Active Directory, and key business applications by assisting with secure patterns for provisioning/deprovisioning, access changes, and role models. Help implement and maintain IAM policies such as MFA requirements, conditional access rules, and privileged access workflows, in coordination with Senior Security