Senior Windows Infrastructure Security Engineer

Saab seeks a Senior Information Security Engineer to secure and harden our Windows-based infrastructure supporting advanced defense and manufacturing systems. In this role you will design and implement Windows security architecture, harden servers and Active Directory, and lead monitoring, incident response, and vulnerability management. You'll collaborate with global engineering and IT teams, automate security controls, and guide security best practices across complex, high-availability environments. This mission-driven position offers the opportunity to protect critical systems while working on cutting-edge technology in a collaborative, learning-focused culture.

Responsibilities

• Design, implement, and maintain secure Windows infrastructure for Saab's manufacturing and defense environments
• Harden servers, Active Directory, and network services following security and compliance standards
• Monitor, analyze, and respond to security events, vulnerabilities, and incidents
• Lead security assessments, penetration tests, and remediation activities across Windows environments
• Automate security controls, patching, and configuration management
• Collaborate with engineering, operations, and IT teams to embed security into systems and processes
• Develop and maintain security policies, procedures, and technical documentation
• Support audits, risk assessments, and regulatory or customer security requirements
• Mentor junior engineers and contribute to security architecture decisions
• Evaluate and integrate new security tools and technologies aligned with Saab's mission

Required Skills

• Windows Server administration
• Active Directory and Group Policy
• Endpoint detection and response (EDR) tools
• SIEM monitoring and incident response
• Vulnerability management and remediation
• Power
• Shell scripting and automation
• Network security and firewalls
• Identity and access management (IAM)
• Security hardening and configuration management
• Security frameworks (NIST, ISO 27001)