Security Systems Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

Bodwé Professional Services Group · 16 hours ago

Security Systems Engineer

Bodwé Professional Services Group is a professional services organization committed to supporting the Pokagon Band of Potawatomi. They are seeking a Security Systems Engineer to manage and maintain their Microsoft security stack and ensure compliance with NIST 800-171, while also optimizing security operations and reporting.

ConstructionConsultingInterior DesignProject Management

Responsibilities

Administer and maintain security tooling across the Microsoft environment. Microsoft Sentinel, Microsoft Defender, and Microsoft Purview (or equivalent Microsoft 365 / Purview data governance tools)
In conjunction with MSP, manage and optimize security dashboards, alerts, and reporting for threat detection, incident response, and risk metrics. Own vendor response management and success metrics
Build and maintain compliance reporting to support NIST 800-171 controls, working with compliance lead and vendors to align technical controls with policy
Implement and maintain security tooling (automation, playbooks) to reduce manual work, improve reaction times, and ensure consistency
Own change management documentation for all security-related system changes across our Microsoft cloud environment, including SIEM, endpoint security, identity, and data governance controls
Monitor security events, triage alerts, investigate potential incidents, and support remediation efforts in coordination with other MSP. Escalate to Compliance and Ops leads for org messaging and alerts
Conduct regular tuning of detection rules, logs, and telemetry to reduce noise and improve coverage
Assist MSP in threat hunting, threat modeling, and proactive security assessments
Manage data governance and classification via Purview (or equivalent): define and enforce data classification, labeling, retention, and access policies
Provide technical oversight for user and endpoint security posture; integrate Defender with identity, endpoint, and cloud infrastructure
Maintain and test incident response procedures and playbooks with regards to Covered Unclassified Information (CUI)
Support security best practices for cloud infrastructure, identity management, access control, and data protection
Provide training and mentorship to other IT staff on Sentinel, Defender, Purview, and security processes
Collaborate with auditors, compliance leads, and external assessors to prepare for assessments (e.g., NIST, CMMC ISO, etc.)
Stay current on Microsoft security offerings, emerging threats, and best practices, and make recommendations for improvements

Qualification

Microsoft SentinelMicrosoft DefenderMicrosoft PurviewNIST 800-171 complianceSecurity operations experienceCloud securityScripting/automationProblem-solving skillsCommunicationSelf-starter

Required

Bachelor's degree in computer science, information technology, cybersecurity, or related field (or equivalent experience)
Minimum 2–4 years of experience in security operations, systems engineering, or cloud security
Hands-on experience deploying, operating, and maintaining Microsoft Sentinel, Microsoft Defender (endpoint, identity, etc.), and Purview (or similar Microsoft security/GRC tools)
Understanding of SIEM, security alerts, log aggregation, and incident response
Experience building dashboards, reports, and alerts to drive visibility and compliance
Scripting, automation, or orchestration experience (PowerShell, Azure Automation, Logic Apps, or similar)

Preferred

Familiarity with NIST 800-171 (or other government / federal security compliance frameworks) and how technical controls map to its requirements
Certifications such as CISSP, CCSP, Microsoft SC-200 / SC-300 / SC-400, or Azure Security Engineer Associate
Familiarity with Azure cloud infrastructure Azure and identity management (Azure AD, conditional access, etc.)
Experience in federal contracting environments or regulated industries (with NIST, FedRAMP, or similar)
Prior work in a small or mid-size business environment; tribal organization experience is a plus but not required
Strong problem-solving skills, with the ability to triage security events and lead investigations
Excellent communication skills—able to translate technical security metrics into meaningful reports for leadership, auditors, and compliance teams
Self-starter with a growth mindset; comfortable working in a smaller, evolving organization of about 200-250 users

Company

Bodwé Professional Services Group

twittertwitter
company-logo
Bodwé Professional Services Group specializes in facilities management, interior design, and project management services.