IT Security Engineer

METECS is an engineering and applied technology company specializing in high-fidelity simulation, software, robotics, and systems analysis.  We are looking for an IT Security Engineer to lead security operations and assist with maintaining our IT infrastructure. This role covers both security program operations and day-to-day administration across Windows, Linux, and cloud environments. Knowledge of NIST SP 800-171 is desired, along with hands-on technical experience.

Responsibilities:
 

• Maintain the System Security Plan.
• Serve as primary point of contact for assessments and external audits.
• Collect and organize audit evidence for NIST 800-171 and ISO 27001 controls.
• Conduct security hygiene activities including access management, configuration management, change control and incident response.
• Review security logs, investigate anomalies, and escalate findings as needed.
• Coordinate vulnerability scanning and remediation.
• Provide support for Linux-based systems and servers, including installation, maintenance, and troubleshooting.
• Configure and manage Microsoft 365, Exchange, Teams, and SharePoint to ensure security and compliance.
• Manage XDR and other security tooling.
• Document system configurations, procedures, and security-related processes.

• 2+ years of IT experience with hands-on security responsibilities.
• Experience with logging, vulnerability scanning, and identity and access management tools.
• Experience with audits, compliance documentation, and evidence collection.
• Strong knowledge of Active Directory, Group Policy, and Microsoft 365 administration.
• Hands-on experience with Linux (Ubuntu, Red Hat, or similar distributions).
• Familiarity with cloud platforms (AWS and Azure).
• Knowledge of networking principles and protocols.
• Strong attention to detail and responsibility.
• Clear communication skills and ability to explain technical issues to a non-technical audience.

• Working knowledge of ISO 27001 or NIST SP 800-171 requirements.
• Experience supporting formal assessments (CMMC, ISO 27001, SOC 2).
• Knowledge of virtualization technologies and containerization.
• Relevant certifications: Windows Server, CISSP, CISM, CompTIA Security+, CompTIA. Linux+, or Certified CMMC Professional (CCP).