The posting
Champion Aerospace LLC
Job Description
Job Title: Security Engineer
Department: IT
Reports To: I T & IS Manager
Shift/Schedule: Office Hours
Summary
The Security Engineer is a high-visibility position responsible for supporting the company's day-to-day IT operations while maintaining and improving the organization's cybersecurity program. This role provides hands-on technical support to employees, helps administer and secure IT systems, and works closely with internal teams and technology vendors to resolve issues and improve the reliability and security of company systems.
This position supports a broad range of technologies, including endpoint systems, Microsoft 365, identity and access management, networking, security tools, business applications, and other infrastructure. The Security Engineer will also participate in projects that improve IT services, security controls, business processes, and compliance.
Duties and Responsibilities
- Support day-to-day IT and security operations, including alert triage, log review, endpoint monitoring, and assisting with security investigations and incident response.
- Provide hands-on IT support and troubleshooting for Windows workstations, laptops, applications, peripherals, and common network/connectivity issues. Help diagnose and resolve PC problems and escalate more complex issues when appropriate.
- Help administer identity and access management systems, including Entra ID, SSO, MFA, directory services, and user onboarding, transfers, and offboarding. Conduct periodic access reviews and help clean up stale accounts and entitlements.
- Maintain and improve endpoint security across the company, including EDR health, patch management, configuration standards, disk encryption, and endpoint security controls.
- Assist with network and infrastructure security tasks, including firewall rule reviews, VPN administration, network segmentation, monitoring, and identifying configuration issues.
- Support the vulnerability management program by assisting with vulnerability scanning, prioritizing findings, coordinating remediation with system owners, and tracking remediation progress.
- Provide basic vendor management and coordination, including opening and tracking support cases, communicating with vendors on technical issues, reviewing service or security documentation, and helping ensure vendor commitments and follow-up items are completed.
- Support third-party and vendor risk management by reviewing security documentation, identifying potential concerns, and tracking remediation or risk acceptance activities.
- Contribute to the company's compliance and security programs by helping collect evidence, maintain policies and procedures, complete customer security questionnaires, and prepare for audits and assessments, including CMMC, Cyber Insurance, and other applicable requirements.
- Build and deliver security awareness content, including phishing simulations, onboarding training, and internal security guidance.
- Serve as a knowledgeable point of contact for employees with IT and security questions, including suspicious emails, lost or replaced devices, access issues, software problems, and security-related requests.
- Document processes, troubleshooting procedures, and runbooks.
- Identify opportunities to improve IT and security processes through automation, better documentation, and more efficient use of existing tools.
- Participate in an on-call rotation as needed for critical IT or security issues.
Minimum Job Requirements
- Associate degree in an IT field and/or 3-5 years of experience in a cybersecurity role
Knowledge, Skills and Abilities Required
- Strong understanding of Windows operating systems, Microsoft 365, networking, and common enterprise IT technologies.
- Working knowledge of cybersecurity concepts, including identity and access management, endpoint protection, vulnerability management, email security, and network security.
- Working knowledge of Active Directory and Microsoft Entra ID.
- Familiarity with endpoint management and security platforms such as Microsoft Intune, EDR, vulnerability scanners, and SIEM/logging systems.
- Basic understanding of networking concepts including TCP/IP, DNS, DHCP, VPNs, firewalls, switching, and wireless networks.
- Ability to troubleshoot PC hardware, operating systems, applications, peripherals, and connectivity problems.
- Ability to understand business requirements and translate them into practical technical solutions.
- Comfortable working independently while also collaborating with other IT staff, vendors, and business departments.
- Strong organizational skills with the ability to prioritize and manage multiple projects, support requests, and competing priorities.
- Strong written and verbal communication skills, with the ability to explain technical and security concepts to employees with varying levels of technical knowledge.
- Ability to maintain accurate technical documentation and follow established processes.
- Familiarity with scripting or automation using PowerShell, or similar tools is preferred.
- Familiarity with IT security and compliance frameworks such as CMMC, NIST, or similar requirements is preferred.
- Relevant certifications such as CompTIA Security+, Network+, Microsoft certifications, CISA, CISM, CISSP, or similar are preferred.
Additional Requirements
- Work will be performed on-site.
- Nights, weekends, and holidays are required at times.
- Successful candidates may be subject to a background check prior to starting work.
Working Conditions and Physical Effort
- Physical effort is required.
- Work is normally performed in a typical interior/office work environment.
- Moderate physical activity. Requires handling of average-weight objects up to 50 pounds.
The employee is expected to adhere to all company policies.
NOTE: This job description is not intended to be all-inclusive. Employee may perform other duties assigned to meet the ongoing needs of the organization.
