[Hiring] Cyber Security Engineer IV @Expansia

Role Description

As a Cyber Security Engineer IV, you will be an emerging authority in Microsoft Defender security technologies, applying deep technical expertise to design, implement, and optimize advanced endpoint and cloud security solutions. You will lead the deployment and integration of Microsoft Defender for Endpoint, Cloud, and Servers to protect enterprise information systems, network infrastructure, and critical data assets while ensuring compliance with industry and regulatory standards. This role requires significant autonomy in defining security objectives, engineering scalable security architectures, and leading incident response and threat mitigation efforts. You will collaborate closely with IT leadership and stakeholders to conduct security assessments, strengthen access controls, and continuously enhance the organization’s security posture through Microsoft’s integrated security ecosystem.

Responsibilities

• Deploy and fine-tune Endpoint Detection and Response (EDR) solutions for real-time threat monitoring and response.
• Configure and optimize Next-Generation Antivirus (NGAV) using behavioral-based protection techniques.
• Conduct continuous vulnerability assessments and develop remediation strategies.
• Implement and maintain attack surface reduction rules to minimize endpoint exposure.
• Integrate Microsoft cloud-delivered protection and monitor Azure-hosted services.
• Connect Microsoft Defender with Microsoft Sentinel and other SIEM tools for centralized logging and analytics.
• Ensure comprehensive endpoint security across Windows, Linux, and mobile platforms.
• Develop reports, dashboards, and alerts to support security operations and compliance.
• Design, implement, and manage Windows Defender Application Control (WDAC) policies.
• Implement Data Loss Prevention (DLP) using Microsoft Defender, Intune, and Purview.
• Apply System Engineering Lifecycle principles to security solution design and maintenance.
• Ensure all contractual deliverables are met or exceeded to customer satisfaction.
• Complete personal PDP and attend Staff Meeting and Storytime (with camera on).
• Build productive and positive professional relationships with clients within the program.
• Execute all contract requirements in accordance with contract-specific LCAT and requirements.
• Perform other related duties as assigned.

Qualifications

• Active Secret Clearance.
• Bachelor's degree in Computer Science, Information Technology, or Relevant Field and 10 years of relevant experience. Or Associate’s degree and 15 years of relevant experience.
• Experience with Microsoft Defender for Endpoint, Cloud, and Servers.
• Endpoint security, threat hunting, and incident response experience.
• Familiarity with SIEM solutions, especially Microsoft Sentinel.
• Strong analytical, communication, and collaboration skills.
• Knowledge of cybersecurity frameworks (e.g., NIST) and regulations (GDPR, HIPAA).
• Security+ CE Certification (or other IAT Level II or III Certification).

Preferred Additional Qualifications

• Other Relevant Technical and/or Security Certifications (e.g., Network +, Microsoft AWS, VMware, CISSP, CISM, CCNA, CCDA, CCNA-Security, etc.) are a plus.
• ServiceNow security workflow automation.
• Linux administration experience (Red Hat Enterprise Linux).
• Microsoft Active Directory / Entra ID.
• Microsoft Federation Services.
• Power BI dashboarding and analytics.
• Advanced PowerShell scripting or software development experience.
• DoD PKI experience.

Benefits

• Competitive compensation.
• Health and wellness programs.
• Income protection.
• Paid leave.
• Retirement and savings.
• Learning and development opportunities.