Senior Windows Infrastructure Information Security Engineer - Defense Manufacturing

SAAB is seeking a Senior Information Security Engineer to lead security for our Windows infrastructure supporting advanced defense and manufacturing systems. In this role, you will design and implement security controls for Windows servers, Active Directory, and endpoints, hardening platforms and responding to threats in a mission-critical environment. You will collaborate with cross-functional engineering teams, guide incident response, and drive continuous improvement of our cyber defenses. Join Saab to protect cutting-edge technologies that safeguard societies worldwide while working in an innovative, learning-focused culture.

Responsibilities

• Design, implement, and maintain security controls for Windows infrastructure in a manufacturing-focused defense environment

• Harden Windows servers, Active Directory, and endpoint systems following security and compliance standards

• Monitor, investigate, and respond to security incidents and vulnerabilities across SAAB's environments

• Collaborate with infrastructure, network, and application teams to embed security into system architecture and deployments

• Conduct risk assessments, security reviews, and configuration audits for Windows platforms

• Develop and maintain security baselines, policies, procedures, and documentation

• Support identity and access management, privilege management, and secure authentication mechanisms

• Evaluate, implement, and tune security tools such as EDR, SIEM, and vulnerability management solutions

• Provide security guidance, mentoring, and best practices to engineers and project teams

• Contribute to continuous improvement of Saab's cyber defense posture and participate in on-call or incident rotations as needed Required Skills

• Windows Server administration

• Active Directory design and hardening

• Endpoint Detection and Response (EDR) tools

• Security Information and Event Management (SIEM)

• Vulnerability management and remediation

• Network security and firewalls

• Identity and access management (IAM)

• Power

• Shell scripting and automation

• Security monitoring and incident response

• NIST/ISO 27001 security frameworks