Cloud and Threat Security Engineer

General Purpose:  

We are seeking a Security Engineer to join our growing Information Technology team.  In this role, you will collaborate with technology teams, business leaders, consultants, and colleagues in Troon to ensure the successful implementation and operation of secure technology. Working in our corporate headquarters in Scottsdale, AZ, you will play a pivotal role in technology risk reduction through operating security tools, defining process, and maintaining compliance with our security program. This role is expected to be in office 3+ days a week. 

 Salary range: $115,000 - $125,000 annually

Essential Duties: 

• Partner with technology and business teams to achieve and sustain compliance with internal and regulatory security requirements. 

• Lead and operate enterprise endpoint and server security controls, ensuring protection and compliance across all managed assets. 

• Own and run the enterprise vulnerability management program, including scanning, prioritization, remediation tracking, and reporting aligned to defined standards and PCI compliance. 

• Secure and maintain tenant security posture across cloud and directory services, with emphasis on Azure/AD identity, configuration, and access protections. 

• Operate and continuously optimize Endpoint Detection and Response tooling to ensure effective detection, response, and asset coverage. 

• Define, implement, and maintain secure configuration baselines for endpoints, servers, and tenant services. 

• Provide architectural and engineering guidance to ensure security controls, incident response, are properly designed and integrated across platforms. 

• Drive continuous improvement of security capabilities through tooling optimization, automation, and process maturation. 

• Perform additional security engineering, governance, risk, compliance, or related duties as required. 
   

Education/Experience:  

• Bachelor’s degree in computer science, Information Technology or Business Management preferred but not required. 

• Minimum five years of experience in enterprise information technology with a focus on engineering and security. 

Certificates/Licenses: 

The following certifications are highly preferred. 

• CRISC, CISSP, CISM or similar security or risk certifications. 

• Microsoft AZ-104, AZ-305, SC-200, SC-300, SC-500, AZ-500 

Job Knowledge, Skill, and Ability Preferences  

• Strong with Microsoft Azure offerings. 

• Strong with Microsoft desktop and server operating systems. 

• Strong with security best practices from NIST, CIS, and PCI. 

• Strong with practical application of security in an enterprise. 

• Analytical and holistic thinking. 

• Ethically and morally sound decision-making abilities. 

• Demonstratable problem-solving skills. 

This job description is not an exclusive or exhaustive list of all job functions that an associate in this position may be asked to perform from time to time.