Senior Security Engineer

Position Summary

NOVVA Data Centers is seeking a highly skilled Senior Security Engineer to lead the design, implementation, and operation of cybersecurity technologies that protect our enterprise, customer-facing systems, and mission-critical data center environments. This position serves as the technical cybersecurity lead and works closely with IT, Networking, Data Center Operations, Physical Security, Compliance, and leadership to define scope and prioritization. The ideal candidate combines strong engineering expertise with operational security experience and thrives in a fast-paced, highly available infrastructure environment.

Primary Responsibilities

Security Engineering

• Design, implement, and maintain enterprise security technologies
• Lead deployment and management of:
  • Microsoft Defender XDR
  • Microsoft Entra ID security
  • Privileged Identity Management (PIM)
  • Conditional Access
  • Defender for Cloud
  • Defender for Endpoint
  • Email Security
  • Vulnerability Management platforms
• Engineer secure cloud and hybrid infrastructure across Microsoft 365 and AWS
• Develop security standards and hardening baselines

Security Operations

• Lead incident response activities
• Investigate security alerts and indicators of compromise
• Perform threat hunting activities
• Conduct forensic investigations when required
• Coordinate response to cybersecurity incidents

Risk & Compliance

Support and maintain compliance with:

• HITRUST
• SOC 2
• ISO 27001
• PCI DSS
• HIPAA
• Internal security audits

Develop security documentation including:

• Policies
• Standards
• Procedures
• Technical runbooks

Vulnerability Management

• Manage enterprise vulnerability scanning
• Prioritize remediation activities
• Coordinate patch management with infrastructure teams
• Track remediation metrics

Identity & Access Management

• Manage privileged access
• Review permissions and access controls
• Implement Zero Trust principles
• Support identity lifecycle processes

Security Architecture

• Participate in infrastructure design reviews
• Evaluate new technologies
• Perform security risk assessments
• Recommend security improvements

Leadership

• Mentor junior security staff
• Provide technical guidance
• Evangelize strong security practices
• Participate in after-hours incident response
• Support cybersecurity roadmap initiatives

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience)
• 7+ years of cybersecurity experience
• 5+ years of security engineering experience
• Experience administering Microsoft security technologies
• Experience with SIEM, EDR, IAM, and vulnerability management platforms
• Strong understanding of:
  • Networking
  • Active Directory
  • Microsoft 365
  • Windows Server
  • Linux
  • Firewalls
  • DNS
  • VPN
  • Zero Trust Architecture

Preferred Qualifications

One or more of:

• CISSP
• GIAC certifications
• GSEC
• GCIA
• GCIH
• Azure Security Engineer
• Microsoft Security certifications

Experience with:

• ServiceNow
• PowerShell
• Python
• Infrastructure as Code
• SIEM/SOAR platforms
• Vulnerability & Patch management
• Operational Technologies
• Data center operations

Core Competencies

• Security Architecture
• Incident Response
• Threat Detection
• Security Engineering
• Risk Management
• Communication
• Project Leadership
• Continuous Improvement