Note: The job is a remote job and is open to candidates in USA. Volexity is a Washington DC-based cyber security firm with a global reach. They are looking for an IT Security Engineer to own security operations across their entire technology environment, manage EDR and SIEM platforms, and lead SOC 2 Type II compliance operations.
Responsibilities
- Own deployment, configuration, and ongoing tuning of our EDR platform (CrowdStrike, SentinelOne, or similar) across all managed endpoints and servers
- Own our SIEM platform: manage log source ingestion (firewall, cloud audit logs, M365, endpoint), develop and maintain detection rules, investigate alerts, and reduce false positive noise
- Lead SOC 2 Type II compliance operations: maintain control evidence, coordinate with external auditors, manage findings remediation, and own the security policy library
- Conduct and manage vulnerability scanning across on-premises and cloud environments; prioritize and track remediation with infrastructure and cloud owners
- Own the incident response process: maintain the IR plan, lead investigations, coordinate containment and remediation, and produce post-incident reports
- Perform periodic access reviews across all platforms (M365, Atlassian, AWS/Azure/GCP, SaaS) as required by SOC 2 access control requirements
- Respond to customer security questionnaires and vendor security review requests in partnership with the IT Director
- Partner with the Systems Administrator on endpoint compliance status and offboarding verification
- Partner with the Cloud Engineer on cloud security posture findings and log pipeline configuration
- Monitor and audit Tailscale access logs and ACL policies; ensure network access adheres to least-privilege principles and incorporate Tailscale activity into SIEM detection coverage
Skills
- 4+ years of experience in security operations, security engineering, or a closely related role
- Hands-on experience operating an EDR platform in a production environment (deployment, policy tuning, alert triage)
- Hands-on experience with a SIEM platform (Splunk, Elastic/OpenSearch, Microsoft Sentinel, or similar) including log ingestion, detection rule development, and alert investigation
- Working knowledge of SOC 2 Type II requirements and control frameworks; experience participating in or leading an audit cycle
- Understanding of cloud security concepts across at least one major cloud provider (AWS, Azure, or GCP)
- Familiarity with Microsoft 365 security features (Defender for Endpoint, Conditional Access, audit logging)
- Experience conducting vulnerability assessments and managing remediation workflows
- Strong written communication skills; ability to write clear incident reports, security policies, and audit evidence
- CISSP, CISM, Security+, or equivalent certification
- Experience with threat hunting or proactive detection engineering
- Familiarity with MITRE ATT&CK framework as applied to detection development
- Experience with identity governance tooling (Okta, Entra ID / Azure AD)
- Prior experience at a software company or in a similarly multi-platform environment
Company Overview