GXA

GXA is an award-winning IT consulting and managed services provider based in Richardson, Texas. With a focus on empowering businesses in Texas, GXA offers a range of IT solutions including managed IT services, business IT consulting, disaster recovery ...

Internet Software & Services

Information Technology

11-50 (30)

Founded 2008

4 open positions

Links

View All Jobs

Security Engineer

3 weeks, 2 days ago

Pakistan, Sri Lanka, South Africa

Contract

Senior

Security Engineer

Cybersecurity

Active Directory AWS Azure Cybersecurity DHCP DNS PowerShell SIEM TCP/IP Windows Server

Apply Now

GXA

Internet Software & Services

11-50

Founded 2008

View All Jobs 4

Description

Serve as a Tier 3 escalation point for security incidents, outages, and complex technical issues.
Lead incident analysis through log review, IOC hunting, attacker-activity analysis, and lateral-movement tracing.
Execute containment, eradication, and remediation actions, including endpoint isolation, session revocation, credential resets, and access restrictions.
Operate and tune the gShield security stack, including Huntress, Microsoft Defender for Endpoint, Cyrisma, DNSFilter, SIEM, and related tools.
Investigate alerts, vulnerabilities, suspicious activity, configuration weaknesses, and security control failures across client environments.
Troubleshoot security and infrastructure issues across identity, endpoints, servers, networks, firewalls, VPNs, virtualization, and cloud services.
Execute and validate client remediation, hardening, vulnerability management, and security improvement activities.
Support internal security initiatives involving MFA, passkeys, Intune, Defender, ThreatLocker, AppLocker, and RMM scripting.
Create and maintain incident timelines, evidence packages, SOPs, runbooks, detection playbooks, and technical documentation.
Collaborate with SOC, infrastructure, onboarding, Centralized Services, security leadership, vendors, and client stakeholders.

Requirements

5–7+ years of experience in cybersecurity, security engineering, infrastructure engineering, network engineering, security operations, or related technical roles.
Strong practical understanding of networking, servers, identity, endpoints, cloud services, and their interactions.
Hands-on experience troubleshooting on-premises, cloud, or hybrid environments.
Working knowledge of Active Directory, Windows Server, DNS, DHCP, TCP/IP, routing, switching, VLANs, VPNs, firewalls, and virtualization.
Experience with security engineering, threat detection, incident investigation, or incident response workflows.
Experience with Microsoft Defender, Huntress, DNSFilter, SIEM, vulnerability management, and endpoint security platforms.
Ability to investigate alerts, analyze logs, determine scope, trace attacker activity, and support containment and remediation.
Familiarity with phishing, BEC, account compromise, ransomware, identity-based attacks, and endpoint compromise.
Strong communication, documentation, collaboration, root-cause analysis, and independent troubleshooting skills.
Preferred: MSP/MSSP experience; Intune, Sentinel, AppLocker, ThreatLocker, Azure, PowerShell, APIs, CIS benchmarks, Zero Trust, or relevant security and infrastructure certifications.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Identity Security Engineer (Remote - LATAM)

Atmosera 51-250 IT Services

Atmosera is seeking a Senior Identity Security Engineer to modernize and secure hybrid Active Directory and Microsoft Entra ID environments while advancing identity governance and Zero Trust initiatives for clients.

Chile Colombia Dominican Republic Ecuador El Salvador Honduras Panama Peru Uruguay Mexico Argentina Contract Senior Security Engineer

Active Directory Azure OAuth PowerShell SAML

2 days, 15 hours ago

Apply

2 days, 15 hours ago

IAM Architect - Saviynt

IDMWORKS 51-250 Professional Services

IDMWORKS is hiring an IAM Architect - Saviynt to design and deliver identity and access management solutions that strengthen security and support access control across enterprise environments.

United States Contract Senior Security Engineer

Active Directory Cybersecurity OAuth SAML

3 weeks, 4 days ago

Apply

3 weeks, 4 days ago

IT Administrator (Google Workspace & Rippling)

Concierge Auctions 51-200 real estate

Concierge Auctions is hiring a remote IT Administrator to manage core internal systems and help build a unified company-wide access control layer for its cloud-based, luxury real estate business.