protecting client environments — monitoring for threats, anticipating vulnerabilities before they are exploited, and responding swiftly and effectively when incidents occur

About the Role

We are a growing Managed Service Provider (MSP) delivering hardware, software, low voltage installations, and comprehensive IT support to businesses across multiple industries. At 1Above Technology, we’re building the strategic technology partner that growing businesses rely on — delivering custom-tailored IT and support that keep their operations running so they can focus on what they do best. Our client base spans healthcare, apartment communities, restaurants, law offices, and schools.

As cyber threats grow in frequency and sophistication, security has become one of the most critical services we provide to our clients. We are seeking a Security Engineer to join our two-person Security team, reporting to the Security Manager. This role is primarily focused on protecting client environments — monitoring for threats, anticipating vulnerabilities before they are exploited, and responding swiftly and effectively when incidents occur. Maintaining the security of our own internal systems is equally important, as any gap there directly impacts the clients who depend on us.

This is a monitoring-intensive role for a technically sharp, detail-oriented professional who takes security personally and understands the stakes, particularly in industries like healthcare, where the consequences of a breach extend well beyond data loss.

What Success Looks Like in the First Year

• Client environments are being proactively monitored with no critical threats going undetected; you’ve established a reliable rhythm of threat scanning, alerting, and reporting across the portfolio
• When incidents occur, response is fast and structured — clients and internal stakeholders are informed promptly, containment happens quickly, and root cause analysis follows every event
• Internal systems are hardened and audited — known vulnerabilities have been identified, prioritized, and addressed in partnership with the Security Manager
• You’ve built enough familiarity with our client environments that you can anticipate risk patterns by vertical — particularly across healthcare, legal, and other sensitive sectors

Key Responsibilities

Client Environment Security

• Monitor client networks, endpoints, and systems for threats, anomalies, and indicators of compromise using SIEM, EDR, and other security tooling
• Proactively assess client environments for vulnerabilities through regular scanning, risk assessments, and security audits — identifying exposure before it becomes an incident
• Develop and maintain a clear understanding of each client’s security posture, infrastructure, and risk profile to enable faster, more accurate threat detection
• Deliver regular security reports and findings to the Security Manager, with clear prioritization of risks and recommended remediation steps
• Support clients across regulated industries — particularly healthcare — in maintaining security practices aligned with applicable compliance frameworks

Incident Response & Breach Management

• Serve as a primary technical responder when security incidents occur — executing containment, eradication, and recovery steps in a timely and methodical manner
• Maintain and follow documented incident response playbooks, ensuring every event is handled consistently and completely
• Communicate clearly with the Security Manager and relevant internal teams during active incidents, providing accurate status updates and escalating appropriately
• Conduct post-incident analysis to identify root cause, document findings, and recommend controls to prevent recurrence
• Maintain detailed incident logs and contribute to ongoing improvement of the team’s response capabilities

Threat Intelligence & Anticipation

• Stay current on emerging threats, vulnerabilities, attack vectors, and adversary tactics — translating threat intelligence into proactive protective action for client environments
• Identify patterns across client environments that may indicate coordinated or emerging risk, and surface those findings to the Security Manager
• Recommend and help implement security controls, configurations, and tooling improvements that reduce attack surface across the client portfolio
• Participate in the evaluation of new security tools and technologies as the team’s capabilities evolve

Internal Systems Security

• Monitor and maintain the security of 1Above Technology’s own internal infrastructure, recognizing that our internal posture directly affects the clients we serve
• Identify and remediate vulnerabilities in internal systems, networks, and endpoints in coordination with the Security Manager
• Support the enforcement of internal security policies, access controls, and data handling standards
• Contribute to security awareness within the broader 1Above Technology team, helping colleagues recognize and respond to threats such as phishing and social engineering

Cross-Team Collaboration

• Partner with Helpdesk to establish clear escalation paths for security-related tickets, ensuring suspicious activity reported by clients or flagged internally reaches Security promptly and is triaged appropriately
• Coordinate with Project Management during new client onboarding and infrastructure deployments to ensure security requirements are scoped, communicated, and addressed from the start
• Support Customer Success in communicating security-related matters to clients, helping the Customer Success team understand the nature and severity of incidents well enough to maintain client trust and set accurate expectations during and after an event
• Engage with Professional Services during client onboarding to conduct or contribute to baseline security assessments, ensuring new client environments are evaluated and documented before full service delivery begins
• Collaborate with the Service Delivery team to ensure cohesion in security considerations, ensuring they are embedded in how work is routed, escalated, and completed

Documentation & Compliance Support

• Maintain accurate, up-to-date documentation of client security configurations, incident history, and remediation actions
• Support clients in healthcare and other regulated industries with security documentation relevant to their compliance obligations (e.g., HIPAA Security Rule requirements)
• Contribute to internal security policies, standards, and procedures in partnership with the Security Manager
• Regularly review and update internal and client security policies as needed to reflect changes in the threat landscape, client environments, or compliance requirements

Qualifications

Required

• 3+ years of experience in a security engineering, SOC analyst, or similar hands-on cybersecurity role
• Proficiency with SIEM platforms, EDR tools, vulnerability scanners, and network monitoring technologies
• Demonstrated experience identifying, investigating, and responding to security incidents in a structured, documented manner
• Solid understanding of networking fundamentals (TCP/IP, DNS, firewalls, VPNs) and how they relate to threat detection and defense
• Strong analytical skills with the ability to assess risk, prioritize findings, and communicate clearly to both technical and non-technical audiences
• Ability to work independently and manage multiple client environments simultaneously without sacrificing thoroughness
• Comfortable operating in a fast-moving MSP environment where client needs and threat landscapes shift quickly

Preferred

• Experience working in an MSP or multi-client security environment, managing security across diverse industries and infrastructure types
• Familiarity with HIPAA Security Rule requirements and the practical security considerations of healthcare IT environments
• Experience with compliance frameworks such as NIST CSF, CIS Controls, SOC 2, or ISO 27001
• Relevant certifications such as CompTIA Security+, CySA+, CEH, GCIH, or equivalent
• Exposure to cloud security (Microsoft Azure, AWS, or Google Cloud) and securing hybrid environments
• Experience supporting security for client verticals including legal, education, or multifamily residential
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent hands-on experience

What We Offer

• Medical benefits options including medical, dental, and vision coverage (no contirbutiona at this time)
• 401(k) with company match after 1 year of employment
• Paid time off and company holidays
• Professional development support including certifications and training
• Collaborative, growth-oriented culture with direct access to leadership