Cyber Engineer (Remote)

Goals and Objectives:

• Maintain a secure posture during migration
• Ensure security tooling is configured and validated
• Reduce internal workload via augmentation
• Enable focus on architecture and governance
• Maintain alignment with NIST SP 800-171 / CMMC

Tasks and Responsibilities

1. Security Configuration & Hardening

• Assist with implementation and validation of:
  • CIS baseline configurations (L1 minimum)
  • Secure configuration of endpoints, identities, and cloud services
• Validate security configurations across:
  • Entra ID (Azure AD) 
  • Intune-managed devices
  • Microsoft 365 services
• Identify and remediate configuration drift

2. Vulnerability Management

• Validate agent deployment and reporting coverage
• Perform vulnerability triage and prioritization
• Track remediation progress and validate closure
• Identify gaps in scanning coverage (devices, subnets, cloud resources)

3. Microsoft Defender Support

• Assist with configuration, tuning, and validation of:
  • Microsoft Defender for Endpoint
  • Defender for Cloud Apps
  • Defender for Identity  
• Ensure:
  • Devices are properly onboarded
  • Telemetry is being received
  • Alerts are actionable and tuned
• Support Advanced Hunting queries and validation
• Assist with the configuration and installation of ARC on servers

4. Logging & Monitoring

• Validate log ingestion into Microsoft Sentinel and/or SIEM
• Ensure telemetry coverage across:
  • Endpoints
  • Identities
  • Cloud applications
• Identify gaps in logging or integration
• Assist in alert tuning and the reduction of false positives
• Validate integrations (e.g., Okta, Defender, M365, network tools) Identity
• Okta MFA support
• Access Reviews

5. Migration Security Validation

• Validate security posture before, during, and after migration waves:
  • Devices properly onboarded to security tools
  • Policies applied correctly
  • No loss of visibility or control
• Identify and escalate security gaps introduced by migration activities
• Mobile Device MAM/MDM support

Key Requirements

Security clearance is not required.
• Experience with Defender, Sentinel, Intune, Entra ID, Okta, and Tenable
• Knowledge of NIST 800-171 / CMMC
• SOC/security operations experience
• Preferred certifications: SC-200, CISSP

Past Performance

• Support during IT transformations, Defender/SlEM operations
• Vulnerability management experience