Security Engineer (4562)

@ SMX

Security Engineer

SMX is seeking a Security Engineer to support a State & Local customer. In this hybrid role, you will provide mid-level technical support for both Security Operations Center (SOC) and Identity & Access Management (IAM) teams. You will work on critical security systems and processes within the customer’s managed network supporting executive branch agencies and services.

Essential Duties & Responsibilities

Security Operations (SOC Support):

• Investigate and triage alerts from MDR, SIEM, and security telemetry platforms (e.g., CrowdStrike Falcon, Microsoft Defender, QRadar/Sentinel).
• Participate in incident response activities including evidence collection, ticket management, and coordination with SOC analysts and agency IT staff.
• Monitor dashboards and system health of security tools for continuous visibility.

Identity & Access Management (IAM Support):

• Support Entra ID (Azure AD) and on-prem Active Directory configurations.
• Assist with provisioning and deprovisioning tasks tied to Workday.
• Coordinate with the IAM team to enforce MFA, SSO, and least privilege access models.
• Support implementation of Defender for Identity and manage Domain Controllers.

Additional Duties:

• Validate remediation of misconfigured identities and stale accounts.
• Maintain accurate documentation including technical runbooks.
• Participate in tabletop exercises and assist in knowledge transfer.
• May participate in after-hours on-call rotations for critical incident response.
• Supports Centers of Excellence initiatives like Zero Trust Architecture.
• Travel to agency locations or provide on-site support when required.

Required Technologies and Skills

• 2+ years of experience in information security, technical support, or IT operations.
• Hands-on experience with Microsoft Entra ID/Azure AD, CrowdStrike Falcon, Microsoft Sentinel, and Microsoft Defender for Identity.
• Experience with Workday ERP security functions and IAM practices.
• Familiarity with basic scripting (e.g., PowerShell, Python) and control frameworks like NIST 800-53, CIS Benchmarks.
• Strong attention to detail and ticketing discipline.

Preferred Skills and Qualifications

• Certifications such as CompTIA Security+, Microsoft Certified: Identity and Access Administrator, or Azure Fundamentals.

The SMX salary determination process considers geographic location, relevant work experience, skills, education, and certifications. SMX offers competitive compensation, learning and development opportunities, and benefits including health insurance, paid leave, and retirement.

This hybrid role supports a Warwick, RI customer.

Key skills/competency

• Security Operations
• Identity Management
• MDR
• SIEM
• Azure AD
• Endpoint Security
• Incident Response
• Workday
• Zero Trust
• Scripting