Cyber Security Engineer

This is a fully remote position, open to applicants in Connecticut.

📋 Description

• Deploy, configure, and enhance current security tools.

• Perform threat hunting and detect advanced persistent threats.

• Monitor security incidents and pinpoint vulnerabilities.

• Conduct risk assessments.

• Implement security controls to thwart unauthorized access, data breaches, and malicious activities.

• Integrate security best practices into everyday IT and business operations.

• Ensure compliance with regulatory, organizational, and security standards.

• Assist in incident response and threat detection efforts.

• Continuously enhance the organization's security posture.

• Manage tools for endpoint protection, email security, SASE/SSE, SIEM, and identity and access management.

• Analyze emerging threats.

• Develop security standards, procedures, and technical documentation.

• Support initiatives aimed at increasing security awareness.

• Optimize existing security investments, identify program shortcomings, and strategize for future investments.

• Maintain and deploy security controls and tool architecture.

• Expand log sources and integrate MDR solutions.

• Design and architect innovative security solutions and services.

• Enhance automation and supplement tasks with AI.

• Audit Active Directory and Azure AD / Entra configurations using Ping Castle and Azure AD / Entra Health Reports.

• Identify vulnerabilities in authentication processes, privileged access, legacy protocols, and identity governance.

• Support discussions regarding PAM and RBAC designs.

• Audit Azure and other cloud configurations, including identity and access, network security groups, routing, logging, monitoring, and security controls.

• Assess Azure container and container platform configurations for RBAC, network exposure, secure defaults, and hardening.

• Develop and maintain SOPs, tool guides, project plans, and business continuity plans.

• Enhance configuration policies and technical standards.

• Conduct security posture evaluations for mergers, acquisitions, and third-party assessments.

• Review configurations for networks, firewalls, identity, cloud, vulnerabilities, and risks.

• Identify inherited configuration risks and provide remediation guidance.

• Generate risk-focused audit findings and remediation recommendations.

• Collaborate with infrastructure, network, cloud, and identity teams to validate findings and drive corrective actions.

• Support initiatives in cybersecurity risk and governance.

⛳️ Requirements

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Networking, or a related field.

• Professional certifications such as C|EH, CISCP, or SANS certifications are preferred.

• At least 5 years of experience in cybersecurity or a related field with transferable skills.

• Extensive experience in IT operations, systems administration, cybersecurity, network administration, and/or directory services administration.

• Experience in incident handling, risk identification and management, assessments, and IT function administration.

• Familiarity with both common and uncommon security tools and suites.

• Familiarity with Google SecOps or equivalent SIEM platforms.

• Experience with MDR and SIEM management.

• Experience auditing Active Directory, Azure AD / Entra ID, and cloud environments.

• Familiarity with CIS Benchmarks, configuration hardening standards, and security baselines.

• Understanding of risks driven by configurations versus findings from vulnerability scans alone.

• Capability to document complex technical findings in clear, defensible language.

• Strong knowledge of the MITRE ATT&CK framework.

• Strong investigative skills.

• Understanding of risk sources, potential impacts, and their likelihood.

• Ability to advise on risk responses and mitigation strategies.

• Capability to identify insecure ports and protocols.

• Strong understanding of vulnerability management processes and the patch management lifecycle.

• Analytical and problem-solving abilities to prioritize and manage risks effectively.

• Ability to establish strong relationships across various departments.

• Proficiency in creating clear and concise technical documentation and policies.

• Ability to manage multiple tasks and adapt priorities on short notice.

• High level of professionalism and ethical standards.

• Ideal candidates should be located in the Eastern or Central US time zones.

🏝️ Benefits

• Health insurance.

• 401(k).

• Short-term disability.

• Long-term disability.

• Paid time off.

• Opportunities for growth and development.

• Incentive compensation programs.

• A comprehensive total rewards package.

• Remote work arrangement.