Security Engineer - Onsite

Job Description The Security Engineer is a member of the Security Engineering team responsible for implementing, operating, and supporting security controls across endpoint, cloud, identity, and security operations platforms. This role focuses on hands‑on engineering, automation, and L2/L3 security support, not purely governance or AppSec. This role reports to the Manager, Security Engineering and partners closely with IT infrastructure, Cloud, and Security Operations teams. What You Will Do Act as a subject matter expert (SME) in one or more security domains, such as endpoint security, cloud security, identity, vulnerability management, or security operations Implement, maintain, and tune security tools and controls across enterprise environments Investigate, troubleshoot, and resolve L2/L3 security incidents and break/fix escalations Support routine maintenance and operational health of security platforms Perform approval reviews to validate access, configuration, and security requests meet requirements Support vulnerability identification, prioritization, remediation, and validation Develop and maintain technical documentation, KBs, and runbooks Provide clear status updates and reporting for incidents and security initiatives Automate routine security and operational tasks using scripting and APIs Participate in project‑based security implementations aligned with security architecture Support after‑hours on‑call rotation as part of a team schedule Periodically review existing solutions to maintain compliance and security posture We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.

To learn more about how we collect, keep, and process your private information, please review

Insight Global's Workforce Privacy Policy:

https://insightglobal.com/workforce-privacy-policy/. Skills and Requirements Bachelor's or Associate degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience) 5+ years of hands‑on technology experience, including troubleshooting and root cause analysis Experience across multiple security domains (endpoint, cloud, IAM, vulnerability management, SecOps) Strong experience with security operations tools (SIEM, EDR, vulnerability scanners, ticketing) Proficiency with scripting and automation (Python, PowerShell, Bash, REST APIs) Working knowledge of cloud platforms and applying security controls (Azure and/or AWS) Experience supporting endpoints, operating systems, networking, and identity systems Strong analytical skills and attention to detail Strong technical documentation practices Self‑driven with curiosity and willingness to learn Experience with Microsoft security tools (Defender, Sentinel, Entra ID) Experience with vulnerability management tools (Qualys, Nessus, Rapid7, etc.) Understanding of NIST, ISO, or ITIL frameworks Experience integrating and automating security tools via APIs Exposure to SOAR platforms (Swimlane, Splunk SOAR, etc.) Security certifications such as CISSP, CISM, GIAC, or equivalent Ability to work effectively in fast‑paced enterprise environments