System Security Administrator

Position Summary

A leading provider of Managed Services, IT By Design is looking for a Security Engineer – Tooling, Detection & Response to secure and support client environments. This is a great opportunity for a hands-on security professional with strong experience in security tooling deployment, configuration, detection engineering, incident response support, Microsoft 365/Azure security, and vulnerability management.

Because we support a wide breadth of client environments, the ideal candidate will have strong security expertise, along with solid Windows/Linux administration and networking fundamentals, enabling them to deploy and maintain security tooling effectively and troubleshoot issues end-to-end. This role is responsible for ensuring security controls are not only deployed but properly configured, validated, tuned, and continuously improved to remain operationally effective.

• Key Responsibilities
• Defender (XDR, Cloud Apps, Endpoint, ZAP, AIR, Identity, O365),
• Intune configuration,
• Purview.
• Basically a solid Microsoft engineer that we can mold to Security. Networking experience helps
• Security Tool Ownership: Deployment, Configuration & Optimization:
• •

Serve as the owner for deployment, configuration, and ongoing operations of security tools across client environments, including SIEM and its integrations with EDR/XDR, email security, O365 Identity, cloud security controls, and vulnerability management platforms.

•

Lead implementation and configuration to ensure tools are properly instrumented, correctly integrated, and operationally effective, including agent onboarding, telemetry validation, log ingestion, and integration testing.

•

Configure and maintain security detections including rules, correlations, logic, and thresholds, ensuring meaningful alerts are generated and coverage is consistent across environments.

•

Validate tool effectiveness through controlled testing, including triggering alert conditions, simulating events, confirming response workflows, and verifying detection-to-notification/ticketing paths.

•

Ensure modern and complex environments are securely monitored and covered (e.g., serverless workloads, containerized platforms, Kubernetes environments, hybrid cloud architectures) by aligning tool coverage, logging, and telemetry sources appropriately.

• •
• Perform continuous tuning to optimize signal-to-noise ratio by reviewing alerts, identifying false positives, refining detection logic, creating safe exclusions,
• and maintaining allow/deny lists according to documented standards.
• •

Monitor tool health and coverage (agent status, policy compliance, telemetry gaps, log ingestion failures, data retention) and proactively resolve configuration drift or coverage gaps.

• •
• Maintain documentation and runbooks for each security tool and configuration standard (deployment guides, baselines, tuning decisions, troubleshooting procedures).
• Microsoft 365 / Azure / Identity Security Ownership:
• •

Own configuration and ongoing management of Microsoft 365 security controls including Defender for Office 365, Safe Links/Safe Attachments, anti-phishing policies, tenant hardening settings, audit logging, and Secure Score improvements.

• •
• Support and enforce MFA, Conditional Access, privileged access controls, and identity security best practices in Azure/Entra ID.
• •
• Review audit logs and security posture findings to identify gaps and recommend improvements.
• Security Monitoring & Incident Response:
• •
• Monitor and triage security alerts, investigate suspicious activity, validate threats, and coordinate response actions.
• •
• Follow Incident Response Procedures, document Incident Log including timeline of events, collate and preserve evidence.
• •
• Perform root cause analysis and document findings, remediation steps, and preventive actions.
• •
• Escalate and coordinate with internal and external teams during confirmed incidents.
• Vulnerability Management & Hardening:
• •
• Perform regular vulnerability scanning, analyze results, prioritize remediation, and validate fixes.
• •
• Implement security best practices and hardening standards (CIS benchmarks / Microsoft security baselines) across endpoints, servers, and cloud.
• •
• Work with infrastructure teams to drive remediation actions and confirm security controls remain effective.
• General Support / Collaboration:
• •
• Provide high-quality internal and external support and security guidance.
• •
• Ability to solve problems quickly and/or automate processes.
• •
• Ability to research and learn new concepts and apply them to future projects.
• •
• Ability to follow change controls and security procedures for all client environments.
• •
• Strong interpersonal, verbal, and written communications skills.
• Required Qualifications:
• •
• 4–7+ years of IT experience with at least 3+ years focused on security operations, security engineering, or security tooling ownership.
• •

Proven experience deploying, configuring, and maintaining security tools post-deployment (policy optimization, alert hygiene, telemetry validation, log ingestion, integrations, health monitoring). SIEM experience (Alert Logic) and/or another similar SIEM platform and its integrations.

• •
• Strong experience with Microsoft 365 security, including Defender for Office 365, anti-phishing policies, auditing, and tenant security posture.
• •
• Strong experience with Azure/Entra ID security, including MFA, Conditional Access, privileged roles, and sign-in investigations.
• •
• Experience configuring detections including rules, correlations, alert logic, and thresholds, and validating alert generation through testing.
• •
• Experience with endpoint security/EDR/XDR tooling (Sentinel One, Microsoft Defender for Endpoint strongly preferred).
• •
• Experience with vulnerability scanning and remediation.
• •
• Strong foundational knowledge of Windows systems administration, including Active Directory, Group Policy, Windows Server fundamentals, and event logging.
• •
• Working knowledge of Linux administration fundamentals sufficient to support security telemetry/logging, agent deployment, and troubleshooting.
• •
• Strong networking fundamentals with the ability to troubleshoot across routing, VPN, firewall policies, and DNS/DHCP, including:
• •
• TCP/IP, NAT, ARP, DHCP, DNS, VLANs, VPNs, firewall policies.
• •

Ability to troubleshoot end-to-end issues where root cause may lie in storage/server/network/tool configuration, telemetry gaps, endpoint connectivity, authentication, or cloud settings.

•

This role is security-first and tooling-focused but requires strong operational IT knowledge to ensure security controls remain reliable, effective, and well-integrated across client environments.

• •
• Experience with Intune/MDM, device compliance policies, and endpoint configuration baselines.
• •
• Experience supporting containerized environments and logging pipelines (Kubernetes, container workloads, serverless).
• •
• MSP or multi-client environmental experience is strongly preferred.
• Certifications:
• •
• Security+
• •
• Microsoft certifications: SC-200, SC-300, SC-900, AZ-900
• •
• Network+
• Our Culture and You

What does the day in life look like for Security Engineer You come to work each day in an environment that promotes a community of collaboration and engagement. You work closely with a passionate and positive leadership team that is invested in your success. We work hard and have fun while dreaming big. Our employees have indicated that with IT by Design, they will find a home where their passion and career goals finally intersect for them to live a life full of purpose.

Why work with us – IT BY DESIGN

IT By Design is a leading provider of comprehensive IT solutions, specializing in managed services, cloud solutions, cybersecurity, and more. Headquartered in the US with global teams in the Philippines and India, we focus on innovation, collaboration, and customer-centricity. We are dedicated to empowering businesses with cutting-edge technology solutions. Creating a team of life-long learners and with an employee-first approach, we offer a dynamic and collaborative work atmosphere which fosters a big, small company feel. We place emphasis on building meaningful relationships leading to a people/community-focused environment. And through our dedication to our clients, there is a huge value in adding to others lives.

• Our Core Values
• •
• Humility: We approach every interaction with openness and respect, valuing the perspectives of others.
• •
• Accountability: We take ownership of our actions and outcomes, ensuring reliability and trustworthiness in all that we do.
• •
• Positivity: We maintain an optimistic and enthusiastic attitude, inspiring others and fostering a supportive work environment.
• •
• Passion: We are deeply committed to our work, driven by a genuine enthusiasm for making a difference and delivering exceptional results.
• •
• Your community: We prioritize the well-being and success of our community, contributing positively to the lives of those around us.