IT Security Engineer

Volexity is seeking an IT Security Engineer to manage security operations across their technology environment, including on-premises infrastructure and multi-cloud platforms. The role involves hands-on experience with security tooling, incident response, and compliance operations, particularly SOC 2 Type II.

Responsibilities:

• Own deployment, configuration, and ongoing tuning of our EDR platform (CrowdStrike, SentinelOne, or similar) across all managed endpoints and servers
• Own our SIEM platform: manage log source ingestion (firewall, cloud audit logs, M365, endpoint), develop and maintain detection rules, investigate alerts, and reduce false positive noise
• Lead SOC 2 Type II compliance operations: maintain control evidence, coordinate with external auditors, manage findings remediation, and own the security policy library
• Conduct and manage vulnerability scanning across on-premises and cloud environments; prioritize and track remediation with infrastructure and cloud owners
• Own the incident response process: maintain the IR plan, lead investigations, coordinate containment and remediation, and produce post-incident reports
• Perform periodic access reviews across all platforms (M365, Atlassian, AWS/Azure/GCP, SaaS) as required by SOC 2 access control requirements
• Respond to customer security questionnaires and vendor security review requests in partnership with the IT Director
• Partner with the Systems Administrator on endpoint compliance status and offboarding verification
• Partner with the Cloud Engineer on cloud security posture findings and log pipeline configuration
• Monitor and audit Tailscale access logs and ACL policies; ensure network access adheres to least-privilege principles and incorporate Tailscale activity into SIEM detection coverage

Requirements:

• 4+ years of experience in security operations, security engineering, or a closely related role
• Hands-on experience operating an EDR platform in a production environment (deployment, policy tuning, alert triage)
• Hands-on experience with a SIEM platform (Splunk, Elastic/OpenSearch, Microsoft Sentinel, or similar) including log ingestion, detection rule development, and alert investigation
• Working knowledge of SOC 2 Type II requirements and control frameworks; experience participating in or leading an audit cycle
• Understanding of cloud security concepts across at least one major cloud provider (AWS, Azure, or GCP)
• Familiarity with Microsoft 365 security features (Defender for Endpoint, Conditional Access, audit logging)
• Experience conducting vulnerability assessments and managing remediation workflows
• Strong written communication skills; ability to write clear incident reports, security policies, and audit evidence
• CISSP, CISM, Security+, or equivalent certification
• Experience with threat hunting or proactive detection engineering
• Familiarity with MITRE ATT&CK framework as applied to detection development
• Experience with identity governance tooling (Okta, Entra ID / Azure AD)
• Prior experience at a software company or in a similarly multi-platform environment