Senior Windows Infrastructure Security Engineer - Defense & Manufacturing

SAAB seeks a Senior Information Security Engineer to secure our Windows-based infrastructure supporting advanced defense and manufacturing systems. In this role, you will design and harden Windows servers, Active Directory, and endpoints, monitor threats, and lead incident response across complex, mission-critical environments. You will collaborate with cross-functional engineering and IT teams to embed security into system design, automate configuration and patching, and uphold compliance with industry and defense-grade standards. At Saab, you'll contribute to innovative, high-impact technologies in a mission-driven, collaborative culture focused on safety and long-term security.

Responsibilities

• Design, implement, and maintain security controls for Windows-based infrastructure supporting manufacturing and defense systems
• Monitor, analyze, and respond to security incidents, vulnerabilities, and threats across servers, endpoints, and networks
• Harden Windows servers, Active Directory, and related services following industry and defense-grade security standards
• Conduct security assessments, risk analyses, and remediation planning for critical production and corporate environments
• Automate security configurations, patching, and compliance checks using scripting and infrastructure tools
• Collaborate with cross-functional engineering, IT, and operations teams to embed security in system design and deployments
• Develop and maintain security documentation, standards, and runbooks for Windows infrastructure
• Support audits, compliance efforts, and customer/security stakeholder reviews
• Mentor junior engineers and promote secure engineering best practices
• Evaluate and implement new security tools and technologies aligned with Saab's mission and regulatory requirements

Required Skills

• Windows Server administration
• Active Directory and Group Policy
• Endpoint Detection and Response (EDR) tools
• Security Information and Event Management (SIEM)
• Power
• Shell scripting
• Vulnerability management and remediation
• Network security and firewalls
• Identity and access management
• Incident detection and response
• Security architecture and hardening standards