IT Security Engineer

Required Skills & Experience

5+ years of IT experience, including at least 1–2 years of hands-on cybersecurity, security operations, or security administration experience.

Hands-on experience with Microsoft security technologies, including Defender, Entra ID, Intune, Purview, and/or Sentinel, with knowledge of MFA, Conditional Access, privileged access, endpoint security, and IAM.

Experience with vulnerability management and security remediation, including system hardening, patching, logging, and monitoring.

Working knowledge of security frameworks such as NIST CSF, NIST SP 800-171, and/or CIS Controls, with eligibility to access Controlled Unclassified Information (CUI) under U.S. federal requirements.

Bachelor's degree in cybersecurity, IT, computer science, or a related field, or equivalent professional experience, along with strong communication skills and the ability to work cross-functionally with technical and non-technical teams.

Nice to Have Skills & Experience

Experience supporting CMMC Level 2 and/or NIST SP 800-171 assessments, with CMMC Certified Professional (CCP) or similar security certifications such as Security+, CySA+, GIAC, CISSP, SC-200, or SC-300.

Hands-on experience with Microsoft Sentinel or other SIEM platforms, including PowerShell and/or KQL scripting. Experience partnering with an MSSP or outsourced SOC and supporting incident response, including investigation, containment, remediation, and recovery.

Experience with enterprise security technologies, including firewalls, VPNs, network security, and email security platforms.

Experience working in construction, engineering, infrastructure, or another project-based industry, particularly within multi-company, affiliate, or joint venture environments.

Job Description

This is a 6-month contract-to-hire opportunity targeting $60/hour, with candidates able to sit out of either the Atlanta, GA or Broomfield, CO office on a hybrid schedule consisting of four days onsite and one day remote per week. In this role, the IT Security Engineer will be responsible for implementing and maintaining security controls across Microsoft 365 and hybrid Active Directory/Azure environments, including endpoint protection, identity and Conditional Access, privileged access, device management, data protection, and SIEM. On a day-to-day basis, this individual will work closely with internal infrastructure teams to address vulnerability remediation, system hardening, patch compliance, MFA coverage, network segmentation, and logging and monitoring requirements. They will also serve as a technical point of contact for the outsourced 24x7 SOC, helping validate and escalate security alerts and supporting incident response through recovery. Additional responsibilities will include supporting CMMC Level 2 and NIST SP 800-171 compliance, maintaining audit-ready evidence, assisting with data classification and DLP initiatives, reviewing the security of new software, SaaS and AI tools, and maintaining security procedures, risk documentation, metrics, and audit materials.