Rapid Strategy · 3 months ago
Cybersecurity Operations Engineer (mid-level)
Rapid Strategy is an award-winning, African-American-owned small business providing advanced cybersecurity and IT services. They are seeking a mid-level Cybersecurity Operations Engineer to support Cyber Operations, focusing on incident management, vulnerability management, and security architecture reviews.
AdviceCloud SecurityCyber SecuritySecurity
Responsibilities
Manage and respond to security incidents using tools such as CrowdStrike, Microsoft Security suite (Defender, Sentinel, Entra ID security), and other relevant platforms
Oversee and execute the vulnerability management lifecycle, from detection to remediation guidance, leveraging tools like Jira for tracking and reporting
Partner with IT and engineering teams to provide practical recommendations that improve security posture and reduce attack surfaces
Conduct internal threat modeling and security architecture reviews for applications developed in-house, ensuring secure design principles are implemented
Design and engineer security solutions and automations to strengthen monitoring, detection, and prevention capabilities
Support ongoing security awareness initiatives, including the use of KnowBe4 for phishing simulations and training programs
Collaborate with external partners (e.g., Coalition and other incident response or insurance providers) for risk reporting and posture improvement
Provide detailed reports and metrics on incident trends, vulnerabilities, and compliance posture to leadership
Qualification
Required
2–4 years of experience in cybersecurity operations, incident response, or security engineering
Hands-on experience with CrowdStrike Falcon, Microsoft Security tools (Defender, Sentinel, Intune/Entra), and enterprise vulnerability management workflows
Familiarity with ticketing/project management systems such as Jira
Strong understanding of vulnerability management processes, patch cycles, and common frameworks (CVSS, MITRE ATT&CK)
Knowledge of threat modeling methodologies and secure design principles in modern application development (cloud-native and/or hybrid)
Familiarity with phishing simulation/awareness platforms (e.g., KnowBe4)
Excellent communication skills, with the ability to translate technical risk into clear business recommendations
Preferred
Security certifications such as Security+, CySA+, or Microsoft Security certifications
Experience in vulnerability management, penetration testing and incident response