Position Overview

We are seeking a Security Operations – Level 2 Engineer with strong MSP experience to support and strengthen security operations across our client environments. This role includes identity and endpoint security, monitoring, threat response, cloud‑security operations, and collaboration with our external NOC.

A strong background with Azure / Entra ID, Microsoft Intune, Microsoft 365 security, and general MSP security tooling is essential.
Kaseya experience is preferred, but not required.

Key Responsibilities Security Oversight & Strategy

• Support daily security operations following frameworks such as NIST CSF and CIS Controls.
• Maintain incident‑response procedures, security documentation, and standardized workflows.
• Perform vulnerability scanning, threat analysis, remediation workflows, and risk assessments.

Autotask / Datto / Security Stack Support

• Work hands‑on with core MSP tools including:
• Autotask PSA
• Datto EDR
• Inky (email security)
• SaaS Alerts
• Dark Web ID / BullPhish ID
• Maintain proper alerting, logging, configuration, and automation.
• Collaborate with our external NOC on escalations, monitoring, and coordinated security response.

Azure / Entra ID Security & Identity

• Manage Azure AD / Entra ID identity security, including:
• Conditional Access
• MFA enforcement
• Privileged Identity Management (PIM)
• Access reviews & RBAC management
• Monitor and respond to identity‑based security alerts including risky sign‑ins and anomalous access events.
• Support Zero‑Trust methodologies across cloud and hybrid environments.

Microsoft Intune Endpoint Management

• Manage device enrollment & compliance for Windows, macOS, iOS, and Android.
• Create and maintain:
• Intune compliance policies
• Configuration profiles
• Security baselines
• Manage application deployments and policy‑based security controls.
• Troubleshoot compliance failures, enrollment issues, and platform‑specific security gaps.
• Maintain Conditional Access enforcement tied to device posture.

Client Support & Compliance

• Provide Level 2 Engineer support to clients with compliance or governance requirements.
• Contribute to security reports, audit‑ready documentation, incident summaries, and client advisory deliverables.
• Support secure user lifecycle processes, MFA, endpoint security, data‑protection policies, and identity governance.

Incident Response & Monitoring

• Act as a Level 2 escalation point for security alerts and incidents.
• Assist with investigations, threat containment, remediation, and post‑incident reviews.
• Coordinate with vendors, the external NOC, and internal teams on active threats and systemic improvements.

Required Qualifications

• 3–5+ years in a security, SOC, or engineering role within an MSP or IT services environment.
• Hands‑on experience with:
• Autotask PSA
• Datto EDR
• Inky
• SaaS Alerts
• Azure AD / Entra ID administration
• Microsoft Intune (MDM/MAM)
• Strong understanding of identity security, endpoint protection, Microsoft 365 security, and incident response.
• Familiarity with NIST/CIS frameworks and compliance‑aligned security requirements.
• Excellent documentation and client‑facing communication skills.

Preferred / Nice to Have

• Experience with Kaseya security tools (RocketCyber, Dark Web ID, BullPhish ID, etc.)
• Experience with MDR or SIEM workflows
• Cloud security posture management experience
• Certifications such as Security+, CySA+, SC‑200, SC‑300, CEH, CISSP, or CISM

On‑Call Rotation (Required)

This position requires participation in a structured on‑call rotation, including:

• After‑hours availability for critical security alerts
• Rotating evening/weekend coverage
• Coordinated response with the external NOC and internal engineering team