Security Operations Engineer

The Security Operations Engineer serves to strengthen and advance the security privacy and operational resilience of our enterprise technology environment. This role serves as a key contributor in protecting CRBs infrastructure endpoints identities SaaS platforms cloud services and business application

The position combines expertise in cybersecurity security engineering IT operations compliance and offensive security to design implement and continuously improve controls that reduce organizational risk while supporting business productivity. This position partners closely with IT Legal Compliance Privacy and business stakeholders to translate security and regulatory requirements into practical technical solutions sustainable operational processes and measurable outcomes.

This position reports to the Director of Security Engineering.

Work Mode: Hybrid office three days per week. 

Can be located in: Kansas City MO St. Louis MO Denver CO or Dallas TX 

Responsibilities

Security Engineering & Operations

• Serve as CRBs primary technical liaison to Managed Security Services Providers (MSSPs) overseeing security operations activities vulnerability assessments remediation efforts and third-party service delivery.
• Maintain and administer the enterprise security and privacy risk register ensuring risks are identified assessed tracked mitigated and reported in accordance with established governance processes.
• Develop maintain and enhance security policies standards procedures control documentation runbooks user guidance and incident response documentation in partnership with Security Compliance and Technology leadership
• Lead audit readiness and compliance activities by coordinating evidence collection validating control effectiveness supporting assessments and maintaining comprehensive audit documentation including access records change records vulnerability findings incident documentation and remediation evidence
• Implement administer and continuously improve security controls across cloud environments SaaS platforms and enterprise systems.
• Own identity and access management processes including Azure Entra ID single sign-on (SSO) multifactor authentication (MFA) privileged access management provisioning and deprovisioning activities.
• Support endpoint security patch management device compliance configuration management and asset lifecycle operations.
• Maintain accurate inventories of technology assets applications user accounts licenses data flows and system ownership.
• Partner with IT teams and business stakeholders to improve secure configuration management vulnerability remediation backup and recovery capabilities and operational resilience.
• Evaluate new technologies vendors integrations and data management practices to ensure alignment with security and privacy requirements.
• Automate security and operational workflows using tools such as Python PowerShell Power Automate Jira Automation or comparable technologies.
• Support security monitoring incident investigation containment response recovery and continuous improvement activities.

Security Testing & Risk Assessment

• Conduct authorized vulnerability assessments and penetration testing activities across infrastructure networks cloud environments identity platforms and enterprise applications.
• Perform attack-path analysis and red-team exercises to identify security weaknesses privilege escalation risks and control gaps.
• Analyze security events threat intelligence forensic evidence and vulnerability findings to assess risk and business impact.
• Document findings establish risk ratings identify root causes and recommend practical remediation strategies.
• Validate remediation activities through testing evidence review and control verification.
• Support tabletop exercises incident response simulations and security control testing programs.
• Ensure all testing activities are appropriately authorized documented and executed in accordance with organizational policies and business requirements.

Security Privacy & Compliance

• Support compliance with applicable privacy and security regulations including GDPR Germanys Federal Data Protection Act (BDSG) and Switzerlands Federal Act on Data Protection (FADP).
• Promote Secure by Design and Privacy by Design principles throughout technology initiatives and operational processes.
• Support data governance activities including records of processing data flow mapping retention controls access reviews and protection of sensitive information.
• Partner with Legal Privacy Compliance and business leaders on regulatory inquiries vendor reviews risk assessments and remediation activities.
• Translate regulatory audit contractual and customer requirements into actionable technical and operational controls.
• Assess third-party technology providers and document associated security and privacy risks.
• Track security and compliance findings through closure and provide meaningful reporting to technical and business stakeholders.
• Support CRBs security privacy and governance frameworks including ISO and NIST-aligned initiatives.

Qualifications :

Required

• Bachelors degree in Information Security Information Technology Computer Science Business Administration or a related field; equivalent experience.
• Minimum of 3 years of experience in cybersecurity IT operations infrastructure management endpoint administration enterprise applications or a related discipline.
• Proven experience supporting enterprise endpoints SaaS platforms identity systems and geographically distributed workforces.
• Experience with vulnerability management penetration testing incident response network security analysis and digital forensics.
• Experience administering Microsoft 365 Azure Entra ID Intune or comparable identity and endpoint management solutions.
• Working knowledge of SSO SAML MFA privileged access management access provisioning and least-privilege principles.
• Demonstrated understanding of firewalls intrusion detection and prevention systems network security monitoring operating system security and common attack methodologies.
• Experience automating technical processes using Python PowerShell or similar scripting languages.
• Experience supporting audits compliance reviews technical documentation evidence collection and control testing.
• Working knowledge of GDPR and familiarity with German and Swiss privacy regulations.
• Proven strong analytical problem-solving organizational and communication skills.
• Demonstrated ability to manage multiple priorities work independently and drive cross-functional remediation efforts.

Preferred

• Professional security certifications such as CompTIA Security Cloud OSCP PNPT GPEN CEH or comparable credentials.
• Experience participating in penetration testing red-team engagements security labs or adversary simulations.
• Experience supporting business operations in Germany Switzerland Austria or other European jurisdictions.
• Experience with Microsoft Defender SIEM platforms EDR solutions vulnerability scanning tools and cloud security technologies.
• Experience conducting third-party risk assessments and vendor security reviews.
• Familiarity with ISO 27001 ISO 27701 ISO 42001 NIST Cybersecurity Framework or similar governance frameworks.
• Experience with Jira Service Management Jira Assets Confluence SharePoint Power BI or related enterprise platforms

Additional Information :

All your information will be kept confidential according to EEO guidelines.

CRB is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity Employer and it is our policy to provide equal opportunity to all people without regard to race color religion national origin ancestry marital status veteran status age disability pregnancy genetic information citizenship status sex sexual orientation gender identity or any other legally protected category. Employment is contingent on background screening.

CRB does not accept unsolicited resumes from search firms or agencies. Any resume submitted to any employee of CRB without a prior written search agreement will be considered unsolicited and the property of CRB. Please no phone calls or emails.

CRB offers a complete and competitive benefit package designed to meet individual and family needs.

If you are unable to complete this application due to a disability contact this employer to ask for an accommodation or an alternative application process.

Remote Work :

No

Employment Type :

Full-time