Cyber Security Engineer — Atlanta Metropolitan Area

g37cbVk is hiring a Cyber Security Engineer to build and run the security controls that keep regulated clients protected and audit-ready. This role is fully remote and open to candidates in the US, UK and Europe.

ABOUT 4DyUWcR

g37cbVk is a security-first managed IT and cybersecurity partner for insurance, financial services and other regulated firms across the US, UK and Europe. We run our clients' IT and security day to day and handle the IT side of their mergers and acquisitions, with teams in Atlanta, London and Skopje.

THE ROLE

You'll design, deploy and tune security controls across our clients' Microsoft environments: identity, endpoint, email, cloud and network. You'll take escalations from our analysts, lead remediation, and set the standards for how we secure a client from day one.

WHAT YOU'LL DO

• Deploy and tune CrowdStrike Falcon, SentinelOne, Microsoft Defender XDR and Defender for Cloud across client tenants

• Run email security with Abnormal Security and Mimecast

• Harden Microsoft 365, Entra ID, Intune and Azure against CIS benchmarks and Secure Score

• Design and enforce Conditional Access, phishing-resistant MFA, PIM and privileged access

• Build Sentinel analytics rules, workbooks and automated playbooks

• Lead remediation of escalated incidents, from containment to root cause

• Own vulnerability management with Tenable, Axonius and Tanium

• Run identity governance in Lumos and privileged access with Delinea

• Roll out data and AI security controls with Purview, Varonis and Firefly

• Map controls to CIS, NIST, ISO 27001 and SOC 2, and produce audit evidence in Apptega

• Coach analysts and review their investigations

WHAT WE'RE LOOKING FOR

• 3–5 years in security engineering, with at least 2 years primarily on Microsoft security

• Hands-on deployment of an enterprise EDR (CrowdStrike or SentinelOne) alongside Sentinel and Defender XDR

• Strong Entra ID: Conditional Access, MFA, PIM and identity protection

• Experience hardening Microsoft 365 and Intune-managed devices

• KQL for detections and hunting; PowerShell for automation

• Working knowledge of firewalls and network security; Fortinet helps

• Incident response experience from containment to lessons learned

• Experience producing control evidence for audits

• Clear written English: you can explain risk to an executive and an engineer NICE TO HAVE

• MSP or multi-tenant experience using Azure Lighthouse • Regulated environments and frameworks such as SOC 2, GDPR, NIS2 or DORA

• Security integration during mergers and acquisitions

• Identity governance and PAM: Lumos, SailPoint or Delinea

• Certifications: AZ-500, SC-200, SC-300, CISSP or CCSP

TOOLS YOU'LL USE

Microsoft Sentinel, KQL, Defender XDR, CrowdStrike Falcon, SentinelOne, Tanium, Intune, Tenable, Axonius, Abnormal Security, Mimecast, Entra ID, PIM, Lumos, Delinea, Purview, Varonis, Firefly, Defender for Cloud, Snyk, FortiGate, FortiManager, FortiAnalyzer, Fortinet SASE, Apptega

WORKING CONDITIONS

• Fully remote from the US, UK or Europe

• Hours overlap with US Eastern business hours

• Shared after-hours on-call rotation

• Company laptop, paid certification prep and exam vouchers

g37cbVk is an equal opportunity employer. We make hiring decisions based on qualifications and merit.