Tustin CA (Onsite) - Occasional remote work may be available
Fulltime
Salary Range: 145-160K

Mission:

• To own and mature the organization's cybersecurity program while supporting the security, reliability, and compliance of our mission-critical SaaS platform and corporate infrastructure.

Day to Day:

• Looking for a true security engineer, not a compliance analyst or a help desk technician with security duties.
• The ideal candidate has hands-on responsibility for securing systems, responding to incidents, managing vulnerabilities, and implementing security controls in a -centric environment.
• The role is 60% Security Engineering & Operations, 25% Infrastructure Security and 15% Compliance/Governance.
• This is primarily a hands-on security engineering role. We need someone who can improve security posture, investigate incidents, secure infrastructure, and help implement controls required for compliance initiatives.
• This role serves as the primary technical security resource for the organization and is responsible for security operations, vulnerability management, incident response, infrastructure hardening, identity security, compliance initiatives, and cloud security governance.
• The ideal candidate combines strong cybersecurity expertise with practical infrastructure experience and can effectively partner with Engineering, DevOps, and IT teams to reduce risk while enabling business growth.

Must Haves:

• 5+ years of experience in Security Engineering, Infrastructure Security, Cybersecurity Operations, or a related discipline.
  Security Operations & Incident Response – experience investigating security events, managing incidents, threat detection, log analysis, and coordinating remediation efforts.
• Security Stack – hands-on experience with 365, Entra ID (Azure AD), Defender, Conditional Access, MFA, and identity security.
• Infrastructure & Vulnerability Management – strong Windows Server, Active Directory, networking, vulnerability scanning, hardening, patch management, and security remediation experience.
• Experience administering SIEM, EDR, and vulnerability management platforms.
• Experience managing cloud environments, preferably Azure.
• Strong understanding of vulnerability management and risk mitigation practices.
• Experience with NIST Cybersecurity Framework and related security controls.
• Experience with PowerShell, Python, Bash, or other scripting languages.

Pluses:

• Experience supporting FedRAMP, CMMC, FISMA, SOC 2, or similar compliance frameworks.
• Experience with Sentinel, Defender, CrowdStrike, Splunk, Tenable, Nessus, Qualys, or equivalent platforms.
• Experience implementing CIS Benchmarks or DISA STIGs.
• Experience supporting SaaS environments and cloud-hosted applications.
• Experience with Infrastructure-as-Code solutions such as Terraform or Ansible.
• Professional certifications such as CISSP, Security+, GSEC, Azure Security Engineer, or equivalent.

"This is a direct hire opportunity. The selected candidate will be employed directly by our client. All compensation and benefits, including but not limited to medical insurance, retirement plans, paid time
off, and other perks, will be provided by the client in accordance with their internal policies and subject to applicable laws and eligibility requirements.”