Cyber Security Engineer

About the Company

About the Role

Responsibilities

• Will need to have fundamental hands-on experience with core infrastructure operating systems, host compliance, file integrity monitoring solutions, and advanced malware defensive technologies.
• Base knowledge of running Red Hat Enterprise, MAC OSX and Windows Enterprise operating systems.
• Will have experience with fast paced, incentivized business operations that need to be agile while adhering to diverse regulatory and security framework expectations.
• The essential functions listed represent the major duties of this role, additional duties may be assigned.
• Manage system/application environment, configuration, policy and required operational activities on assigned technical security solutions.
• Monitors, reports on, and enhances performance of assigned technical security solutions.
• Design, implement, and manage security solutions using the Microsoft Cybersecurity stack, including but not limited to Entra ID, Defender for Identity, MS Defender for Endpoint, MS Defender for Office 365, and Defender for Cloud.
• Develop and enforce security policies, procedures, and standards in alignment with OWASP and DevSecOps best practices across the organization and development teams.
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks.
• Monitor and respond to security incidents, providing timely and effective resolution.
• Collaborate with cross-functional teams to integrate security measures into the software development lifecycle.
• Provide guidance and training to internal teams on security best practices and emerging threats.
• Stay up to date with the latest security trends, technologies, and regulatory requirements.

Qualifications

• Bachelor's degree in computer science, Information Technology, or a related field.
• Proven experience in cybersecurity, with a focus on the Microsoft Cybersecurity stack.
• Strong knowledge of MS Entra ID, Identity Access Management, Defender for Identity, Defender for Endpoint, Defender for Office 365, and Defender for Cloud.
• Familiarity with OWASP and DevSecOps principles.
• Experience with additional security tools such as CrowdStrike and SonarQube is a plus.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication and interpersonal skills.

Preferred Skills

• Certifications such as CISSP, CISM, or Microsoft Certified: Security, Compliance, and Identity Fundamentals.
• Experience with cloud security and hybrid environments.
• Knowledge of scripting languages (e.g., PowerShell, Python) for automation.

Equal Opportunity Statement

Sonny’s is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under state, or local anti-discrimination laws.