Security Engineer with Incident Response

Job Summary

To support a customer security operations engagement, the short-term remote Security Engineer with Incident Response will monitor and investigate security alerts, perform incident response activities, and assist with Microsoft 365 administration tasks in a 24/5 environment.

Key responsibilities

• Monitor, investigate, and triage security alerts and incidents
• Perform incident response activities using security monitoring and endpoint protection tools
• Document operational procedures, runbooks, and standard operating procedures (SOPs)

Required qualifications

• 3+ years of experience in Security Operations, Incident Response, or Cybersecurity Engineering
• Hands-on experience with CrowdStrike, Microsoft Defender, and related security platforms
• Strong understanding of Microsoft 365 security and administration
• Experience supporting Windows 10 and Windows 11 environments
• Familiarity with Active Directory and identity management