Be Part Of A High-Performing Team
Join a mission-driven energy organization focused on delivering cleaner, more sustainable electricity solutions to communities across Southern California. This organization operates in a highly regulated environment where security, reliability, public trust, and operational excellence are critical. The technology team works collaboratively across data, systems, risk, finance, operations, customer-facing functions, and external partners, with a culture that values accountability, intellectual curiosity, sound judgment, and continuous improvement.
What’s In Store For You
- Full-time direct hire opportunity.
- Remote or hybrid work options available.
- Hybrid employees work approximately 2–3 days per week onsite in Downtown Los Angeles.
- Remote and hybrid employees attend organization-wide or team events approximately three times per year for 3–5 days per event.
- Standard working hours are aligned to 8:30 AM–5:30 PM Pacific Time.
- Benefits include healthcare coverage, retirement matching, paid vacation, and sick leave.
- Opportunity to serve as a highly visible cybersecurity technical lead in a growing, mission-focused organization.
How You Will Make An Impact
- Serve as the technical lead for enterprise cybersecurity architecture and security operations across a Microsoft-centered technology environment.
- Architect, implement, and administer security solutions spanning Microsoft Entra ID, Defender XDR, Intune, Sentinel, Purview, and Defender for Cloud.
- Design identity governance, privileged access, conditional access, zero-trust, endpoint security, and secure configuration standards.
- Lead enterprise threat detection, incident response, vulnerability management, security monitoring, and post-incident remediation.
- Build and tune Microsoft Sentinel detections, KQL queries, analytics rules, workbooks, automation, and response playbooks.
- Establish cybersecurity policies, architecture standards, technical roadmaps, and controls aligned with the NIST Cybersecurity Framework.
- Partner with audit, regulatory, risk, technology, and business teams to demonstrate control effectiveness and close security gaps.
- Manage and coordinate managed security service providers, including SLA oversight, deliverable review, and performance management.
- Evaluate cybersecurity risks related to new technology platforms, integrations, business processes, websites, customer portals, and third-party vendors.
- Identify opportunities to automate security processes and improve monitoring, reporting, and operational scalability.
Do You Have the Expertise to Lead in Microsoft Cloud Security & Cybersecurity Operations?
- Bachelor’s degree in cybersecurity, computer science, information technology, information systems, or a related field.
- Minimum 5 years of cybersecurity, cloud security, or enterprise IT security experience.
- Strong hands-on experience administering Microsoft Entra ID, including Conditional Access, identity governance, and Privileged Identity Management.
- Deep experience with Microsoft Defender XDR, including Defender for Endpoint, Identity, Office 365, and cloud security capabilities.
- Proven hands-on expertise with Microsoft Sentinel, including SIEM administration, KQL, detection engineering, analytics rules, dashboards/workbooks, and automation.
- Strong experience with Microsoft Intune, including endpoint configuration, compliance policies, device security, and application protection.
- Working knowledge of Microsoft Purview, including DLP, information protection, insider risk, and data classification.
- Experience with Microsoft Defender for Cloud and cloud security posture management.
- Practical experience applying the NIST Cybersecurity Framework, with knowledge of NIST 800-53 or NIST 800-171 controls.
- Hands-on background in vulnerability management, threat intelligence, security monitoring, and incident response.
- Strong understanding of zero-trust architecture, IAM, endpoint security, network security, data privacy, and security governance.
- Exposure to cloud platform security outside the Microsoft ecosystem, particularly AWS, is preferred.
- Experience with Windows/Linux endpoint hardening and SQL/database environments is valuable.
- At least one relevant cybersecurity certification such as SC-100, SC-200, SC-300, AZ-500, CISSP, CISM, or GIAC, or the ability to obtain one within 6–12 months of hire.
- Experience supporting a regulated environment such as energy, utilities, financial services, healthcare, or the public sector is highly desirable.
- Strong communication skills with the ability to explain complex cybersecurity concepts to both technical and non-technical stakeholders.
- Comfortable operating independently, owning security initiatives, managing competing priorities, and working in a fast-moving environment.