Job Description

About This Role

Our Client is a well-established, growing Buffalo-based organization running a cloud-first Microsoft Azure environment and investing heavily in enterprise AI.

We are seeking a Senior Security Engineer to serve as the hands-on technical lead for information security. You will identify vulnerabilities, recommend the fix, and implement it yourself. As Senior Security Engineer, you will own firewall and Microsoft security tooling, lead incident response, and automate security operations, working alongside a security policy and governance lead. This role is built for a self-directed engineer who takes ownership without waiting to be told what to check.

*Hybrid role reporting to Buffalo office 2 days/week

Responsibilities

• Own hands-on security engineering across on-prem, Azure cloud, and hybrid environments, from assessment through implementation
• Run security assessments and vulnerability scans, coordinate penetration testing, and drive risk-based remediation
• Administer and tune the Microsoft Defender suite (Defender for Endpoint, Identity, Office 365, and Cloud Apps) and Microsoft Sentinel
• Configure and manage firewalls, network security controls, Conditional Access, and Intune policies
• Configure and maintain Microsoft Purview Data Loss Prevention (DLP) across email, Teams, SharePoint, OneDrive, and endpoints
• Lead security incident response: monitor, investigate, contain, remediate, and document
• Automate security operations and alert handling using PowerShell and SIEM/SOAR tooling
• Manage privileged access and credential controls (PAM/IAM) for critical systems
• Communicate security risk, posture, and incident updates to IT leadership

Required Qualifications

• 5+ years of hands-on information security experience, or systems administration with a strong security focus
• Proven ability to independently identify, prioritize, and resolve security risks without step-by-step direction
• Deep experience with Microsoft 365 security and the Microsoft Defender ecosystem
• Hands-on firewall configuration and network security experience
• Experience leading security incident response
• Microsoft Purview / DLP policy configuration
• Strong knowledge of Windows Server, Active Directory, Group Policy, and Entra ID (Azure AD) in hybrid environments
• PowerShell scripting and security automation