Security Engineer

The Security Engineer is responsible for implementing, managing, and continuously improving Arcera's cybersecurity controls across cloud, hybrid, and endpoint environments. The role ensures the confidentiality, integrity, and availability of systems and data while supporting compliance, risk management, and incident response across the organization. Key Responsibilities Implement, configure, and manage security controls across Azure, Microsoft 365, and hybrid environments using tools like Microsoft Defender for Cloud, Microsoft Sentinel (SIEM), Microsoft Defender for Endpoint/Office 365/Identity/Cloud Apps, Microsoft Purview (compliance, DLP, eDiscovery), and Entra ID (formerly Azure AD). Identify and remediate vulnerabilities: Conduct security assessments, vulnerability scanning, and support application of patches/remediations across cloud resources, endpoints, and applications. Ensure compliance and governance: Align environments with regulatory requirements (e.g., GDPR, ISO 27001, NIST), implement data loss prevention (DLP), information rights management (IRM), audit logging, and reporting via Purview. Support SoC in response to security incidents: Investigate escalations, contain threats, perform root-cause analysis, and improve detection/response processes. Manage and administer training and awareness programs, monitor and assess reported phishing and quarantine requests. Maintain documentation: Perform risk assessments, Create security policies, runbooks, architecture diagrams, and reports on security metrics and posture.

Desired Candidate Profile

Over 4 years in cybersecurity, with 3+ years focused on Microsoft technologies (Azure, M365 security stack). Excellent written and spoken English Experience working in a GxP environment is a plus Certifications: Any Microsoft certifications or Security qualification are a plus. Soft

Skills

• Analytical problem-solving, strong communication (explaining technical risks to non-technical stakeholders), attention to detail, ability to work independently and to work under pressure during incidents, strong teamwork in cross-functional environments and the ability to work in a constantly changing environment
• Core

Technical Skills

• Deep understanding of Microsoft technologies such as Server and Desktop OS's, ADDS, Endpoint Security, ADCS/PKI, Group Policy etc. Deep expertise in Azure security services (Defender for Cloud, Sentinel, Entra ID, NSGs, Key Vault, etc.)
• Strong knowledge of Microsoft 365 security (Defender suite, Purview, Conditional Access, DLP, Teams/SharePoint/Exchange Online security)
• Identity & access management (Entra ID, hybrid identity sync, SSO, federation)
• Threat detection/response (SIEM/SOAR, EDR, XDR concepts)
• Networking/security fundamentals (firewalls, IDS/IPS, VPN, encryption, Zero Trust)
• Scripting/automation (PowerShell mandatory; Python or others a plus)
• Understanding of compliance frameworks and risk management
• Experience with TenableOne and /or KnowBe4 is a plus