Cybersecurity Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and optimize co-sourced SIEM solutions like Rapid7 and Arctic Wolf.

• Configure and troubleshoot log ingestion from Azure, Microsoft 365, on-premises servers, and network devices.

• Provide support for incident detection, response workflows, and forensic readiness.

• Define, implement, and oversee the vulnerability management program.

• Manage and enhance Microsoft 365 security tools, including Defender, Intune, Purview, and Entra ID.

• Support, troubleshoot, and guide identity access management and identity governance programs based on Zero Trust principles.

• Engineer and support the rollout of PAM, ZTNA, and SASE solutions.

• Assist, guide, and support the hardening of Windows/Linux servers, network infrastructure, backups, hypervisors, and Azure environments.

• Propose network segmentation, firewall tuning, and secure configuration baselines.

• Implement and enforce SOC 2, ISO 27001, and PCI-aligned controls.

• Lead cybersecurity projects, including enhancements in cloud security, PAM deployments, SIEM implementations, and disaster recovery initiatives.

• Collaborate cross-functionally with IT, operations, and physical security teams.

• Engineer, manage, and operate servers and applications that host cybersecurity tools and services.

• Develop scripts and automation to enforce security baselines and streamline configuration and cybersecurity tooling requirements.

• Support the secure integration of business applications into Edged infrastructure and identity control planes.

• Review and assess existing infrastructure and security architectures.

• Contribute to the design of scalable, secure, and compliant new systems and solutions.

• Provide guidance on secure cloud, on-premises, and hybrid architectures.

⛳️ Requirements

• A minimum of 7 years of experience in Cybersecurity engineering, focusing on Identity, Endpoint protection, and SIEM.

• Proven experience with server, Azure, and network hardening and management.

• Hands-on experience managing SIEM solutions (Rapid7, Arctic Wolf, or similar) and responding to security incidents.

• Experience in managing Microsoft Defender security.

• Demonstrated expertise in Identity Access Management and Identity Governance and Administrative programs.

• Familiarity with Entra ID, Azure, Active Directory, SSO, SCIM, Conditional Access, and PAM implementations.

• Strong understanding of SOC 2, ISO 27001, and PCI frameworks.

• A Bachelor's degree in Information Technology, Computer Science, or a related field is preferred (or equivalent experience).

• Certifications such as Security+, CISSP, or AZ-500 are advantageous but not mandatory.

• Experience with JIRA and Intune is a plus.

• Proficiency in PowerShell, Python, or Bash for automation and scripting.

• Capability to design, review, and enhance infrastructure and security architectures.

• Strong troubleshooting and problem-solving abilities across complex IT environments.

• Ability to work independently and manage multiple priorities effectively.

• Excellent written and verbal communication skills.

• Capacity to collaborate with both technical and non-technical teams.

• Ability to self-document solutions and decisions.

• Proficiency in communicating technical risks, solutions, and architectural recommendations to both technical and business stakeholders.

• Willingness to travel up to 10% to data center locations.

• Adaptability to a dynamic work environment.

🏝️ Benefits

• Autonomy and flexibility in our work methodology.

• A culture that values excellence, appreciation, trust, and respect.