About the role

The Security Engineer will build and operate the firm's first dedicated cybersecurity program, focusing on a Microsoft-based environment. Key duties include managing threat detection via Sentinel, securing Azure cloud migrations, and supporting SOC 2 compliance audits.

What they look for

Microsoft Sentinel Microsoft Defender XDR Zero Trust Azure Security PowerShell SOC 2 Type II Compliance Microsoft Purview Conditional Access Vulnerability Management Incident Response Threat Hunting Identity Protection Data Loss Prevention Detection Engineering Log Analysis Security Strategy

Requirements

Requires a Bachelor's degree in a technical field and 5+ years of hands-on security engineering experience within Microsoft environments. Proficiency in PowerShell, Microsoft Defender, and implementing Zero Trust controls is essential.

Benefits

Medical insurance Dental insurance Vision insurance 401(k) with match Financial wellness programs Vacation Sick time Holidays Parental leave Volunteer days Hybrid or remote options Flexible hours Performance-based bonus Tuition reimbursement Certifications Mentorship

Full description

Security Engineer

Department: IT Operations

Employment Type: Full Time

Location: United States

Reporting To: Igor Zaika

Compensation: $97,200 - $145,200 / year

Description

At Sensiba, our purpose is to inspire our people, clients, and communities to thrive. We’re a top-75 U.S. accounting and business consulting firm serving clients across the globe, with team members located throughout the United States, Australia, and Ireland.

As we continue to strengthen our technology environment and security posture, we're seeking a Security Engineer to become the firm's first dedicated security professional. Reporting to the CTO, you will play a critical role in building, maturing, and operating our cybersecurity program while partnering closely with Infrastructure, IT Operations, and Compliance teams.

This is a unique opportunity for a hands-on security professional who enjoys building solutions, creating standards, and owning outcomes. You'll be responsible for securing our Microsoft-based environment, enhancing detection and response capabilities, supporting compliance initiatives, and helping protect the sensitive financial information trusted to Sensiba every day.

Key Responsibilities

Security Strategy & Platform Ownership

Lead the final phase of Sensiba's Zero Trust transformation and endpoint security modernization.

Develop, document, and maintain enterprise security standards and configuration baselines.

Establish scalable security practices that support long-term growth and compliance.

Threat Detection & Incident Response

Manage and optimize Microsoft Sentinel for monitoring, detection, and response activities.

Develop and tune detection rules, alerts, investigations, and automated response workflows.

Lead security investigations, incident response efforts, and proactive threat hunting activities.

Endpoint, Cloud & Vulnerability Management

Own Defender XDR, Defender for Endpoint, and Defender for Cloud administration and security posture management.

Monitor and remediate vulnerabilities across user devices and cloud environments.

Partner with Infrastructure teams to strengthen security throughout our Azure migration journey.

Data Protection & Identity Security

Manage Microsoft Purview Data Loss Prevention (DLP) policies and information protection programs.

Administer and refine sensitivity labels and data governance controls.

Design and maintain Conditional Access policies and identity protection strategies.

Compliance & Reporting

Support Sensiba's annual SOC 2 Type II audit process by producing technical evidence and validating controls.

Develop security dashboards, metrics, and reporting for leadership.

Partner with auditors and internal stakeholders to ensure continued compliance and risk management.

Team Partnership & Mentorship

Collaborate closely with Infrastructure, IT Operations, and Compliance teams.

Share knowledge and mentor team members interested in developing security expertise.

Skills, Knowledge and Expertise

Required Qualifications:

Bachelor's degree in Information Security, Computer Science, Information Systems, or a related discipline, or equivalent experience.

5+ years of hands-on Security Engineering experience within Microsoft environments.

Experience administering Microsoft Sentinel, including detection engineering and log analysis.

Strong experience with Microsoft Defender technologies and enterprise vulnerability management programs.

Experience implementing Zero Trust security controls, including Intune and Conditional Access.

Proficiency with PowerShell scripting and automation.

Experience supporting SOC 2 Type II audits and compliance programs.

Demonstrated ability to develop security standards, policies, automations, and operational processes.

Preferred Qualifications:

Experience with Microsoft Purview, Endpoint DLP, and Sensitivity Labels.

Experience optimizing Sentinel logging, retention, and cost management.

Experience securing Azure cloud environments.

Knowledge of Identity Governance and Privileged Identity Management.

Experience with threat hunting methodologies and MITRE ATT&CK frameworks.

SC-200, AZ-500, or similar security certifications.

Experience mentoring junior engineers.

Experience in financial services, professional services, accounting, or another regulated industry.

Compensation & Benefits

Why Join Sensiba?

Be the first dedicated Security Engineer and help shape the future of cybersecurity at Sensiba.

Take ownership of an enterprise Microsoft E5 security environment.

Work closely with firm leadership and influence security strategy.

Receive certification support and opportunities for continued professional growth.

Collaborate with experienced technology and compliance professionals in a highly respected professional services firm.

This role offers a competitive base salary along with a comprehensive benefits package. Salary ranges for U.S.-based positions are determined by geographic location and fall into one of three pay zones, which reflect the cost of labor in that area. The anticipated salary ranges for this position are outlined below and are subject to change:

• US Payzone 1: $118,800 - $145,200

• US Payzone 2: $108,000 - 132,000

• US Payzone 3: $97,200 - $118,800

When determining compensation, we consider a variety of factors such as a candidate’s professional experience, skills, and qualifications. Please note that final offer amounts may vary from the ranges listed above and may be adjusted over time.

There are many reasons to join the Sensiba team: generous benefits, competitive compensation, professional advancement opportunities, and above all — our people. If you're looking for an environment that offers you growth, success, and professionalism without compromising your family, passions, and life outside of work, apply today!

Sensiba has a robust offering of benefits, including:

• Comprehensive Health Coverage – Medical, dental, and vision.

• Retirement & Financial Planning Support – 401(k) with match, financial wellness programs.

• Generous Paid Time Off – Vacation, sick time, holidays, parental leave and volunteer days.

• Flexible Work Arrangements – Hybrid or remote options, flexible hours.

• Performance-Based Bonus – Recognition for your contributions through discretionary bonuses.

• Professional Development Opportunities – Tuition reimbursement, certifications, mentorship.

• Career Growth & Internal Mobility – Clear paths for advancement and role transitions.

• Inclusive & Supportive Culture – DEI initiatives, employee resource groups, wellness programs.