Associate Security Engineer in Arlington, Virginia at American Association of Motor Vehicles

Monitor Microsoft Sentinel and Defender for Cloud alerts, triage incidents, and conduct initial investigationsAnalyze logs from Azure Monitor, Entra ID, NSGs, and endpoint agents to identify anomalous or suspicious activityWrite and tune KQL queries for threat hunting, detection rules, and operational dashboardsAdminister Entra ID (Azure AD) user and group lifecycle — provisioning, deprovisioning, and role assignmentsAssist with vulnerability management workflows using Defender for Cloud and third-party toolsAssist with evidence collection and control mapping in support of the GRC team for SOC2 complianceParticipation in the development and maintenance of security policies, standards, procedures and knowledge-based articlesDevelop detailed architecture security documentsSuccessfully engage in multiple initiatives simultaneouslyEnhance and/or develop procedures and technologies to maximize security incident monitoring and response capabilities

1–3 years of experience in a security operations, cloud security, or IT security roleGeneral security certifications such as Security+, ISC2 CCTechnical certifications: SC-200, SC-300, AZ-104 or equivalent education

BS or MS degree Information Security or Computer ScienceCollege level courses and/or equivalent work experience may be substituted

Excellent communication skills, written and oralExcellent inter-personal skills; ability to interact with all layers of personnelPractical experience administering Entra ID or Active Directory — user/group management, role assignments, and access reviewsWorking knowledge of Microsoft Sentinel or another SIEM platformHands-on experience with Microsoft Azure (Entra ID, Azure Monitor, NSGs, RBAC)Familiarity with KQL or similar query languages for log analysisFamiliarity with PowerShell and scriptingUnderstanding of fundamental security concepts: identity, network segmentation, least privilege, encryption at rest/in transitStrong technical knowledge and solid hands-on experience in securing a Windows environmentProblem solving skills, autonomy, self-driven and ability to work under pressureWorking knowledge of FISMA and/or NIST publications is a definitive plusAbility to adapt quickly to new technologies and changing business requirementsFlexible schedule allowing to work outside of standard business hours when necessaryUnited States citizenship requiredAbility to obtain Public Trust clearance as neededLimited travel may be required