Senior Cybersecurity Engineer

Job Description

Requirements
- -----------

### Must have:

### - Deep, hands-on experience with the Microsoft Defender suite - Strong practical experience with Microsoft Sentinel for SIEM/SOAR operations - Solid background in Microsoft Entra ID for identity and access management - Working knowledge of Microsoft Purview for compliance and data governance - Thorough understanding of Zero Trust architecture - Experience securing cloud environments, especially Azure and Microsoft 365 - Strong grasp of identity and access management best practices - Knowledge of network security and firewalls - Experience in incident response and threat hunting - Familiarity with regulatory and security frameworks such as NIST, CIS, ISO, and CMMC - Microsoft certifications are highly preferred, including SC-200, SC-300, SC-400, and AZ-500 - Experience in construction, field-based, or multi-site environments is a plus - Familiarity with endpoint management through Microsoft Intune is preferred - Experience integrating security tools with ERP or other business systems is preferred - 5 to 10+ years of cybersecurity experience, including at least 3+ years in a senior or lead role

Responsibilities:
- ----------------

- Lead the deployment, setup, and optimization of Microsoft Defender, Microsoft Sentinel, Microsoft Purview, Microsoft Entra, Microsoft Security Copilot, and Microsoft Agent 365 - Design and sustain security architecture aligned with Zero Trust principles - Create, refine, and tune detection rules, analytics, and automated response playbooks in Sentinel - Monitor, investigate, and respond to security alerts, incidents, and threats across Microsoft security platforms - Direct incident response activities, including triage, analysis, containment, and remediation - Perform threat hunting and proactive risk discovery - Maintain and enhance incident response plans and procedures - Review indicators of compromise and emerging threat intelligence - Oversee identity lifecycle, governance, and access controls in Microsoft Entra ID - Implement Conditional Access, MFA, and privileged access strategies - Support passwordless and phishing-resistant authentication methods such as FIDO2 - Implement and manage DLP, retention, and compliance policies using Purview - Support regulatory and compliance efforts as applicable - Develop data classification and protection strategies - Conduct vulnerability assessments and coordinate remediation work - Manage endpoint and cloud security posture using Defender tools - Deliver risk reporting and security metrics to leadership - Provide tier 2/3 support for security-related issues across infrastructure and end-user environments - Support the IT team with endpoint management, Microsoft 365 administration, and identity and network security - Manage third-party security vendors, including Microsoft and a 24/7 SOC - Document security processes and respond to security audits - Serve as the escalation point for complex IT and security issues - Evaluate and introduce new security technologies and best practices - Partner with internal stakeholders to align security efforts with business goals - Contribute to the long-term cybersecurity roadmap and strategy
- -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Company:
- -------

We are Commonwealth Holdings, Inc., the parent company of three subsidiaries delivering electrical and technology solutions across Arizona, Iowa, Nebraska, and Utah. Our businesses include Commonwealth Electric Company of the Midwest, Confluence Technology Group, and Rydalch Electric, serving commercial, institutional, industrial, and technology-focused clients with expertise and reliability. We offer employee ownership, strong work-life balance, comprehensive benefits, mentorship, and ongoing career and leadership development. This Senior Cybersecurity Engineer role is an in-person position based in Lincoln, Omaha, Salt Lake City, Des Moines, or Phoenix, and we are committed to an inclusive, equal opportunity workplace.
- ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------