Senior Cyber Security Engineer

Job Overview 

This is a hybrid role based in Washington, DC, with a mandatory requirement to work from the Washington, DC office three days per week. 

As a Senior Cyber Security Engineer, you will play a senior, hands-on technical role in securing the organisation’s global cloud, identity, endpoint, network, and hybrid infrastructure. You will act as a technical authority for cyber security while remaining directly involved in the design, implementation, configuration, automation, troubleshooting, and improvement of security controls across Microsoft Azure, Microsoft Defender, Microsoft 365, Microsoft Entra ID, Intune, and on-premises environments. You will take ownership of complex security engineering initiatives from technical design through implementation and operational handover. You will also help define security standards and provide technical guidance to other engineers and technology teams. 

The role has a global footprint and requires close collaboration with SOC, Infrastructure, IT Operations, and other technology teams across the USA, Europe, and other international locations. 

Responsibilities 

• Design, implement, configure, and continuously improve security solutions across Microsoft Azure, Microsoft 365, Entra ID, Microsoft Endpoint Detection & Response (EDR/XDR), Intune, and hybrid environments. 

• Manage and optimise the Microsoft security stack, including Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender XDR, and Microsoft Sentinel. 

• Design and implement identity security controls including Conditional Access, Multi-Factor Authentication, Privileged Identity Management (PIM), Identity Governance, and Zero Trust controls. 

• Design and implement endpoint security configurations, including security baselines, compliance policies, encryption, application protection, and endpoint hardening. 

• Implement and maintain secure Azure landing zone, including Azure Policy, RBAC, PIM, Private Endpoints, NSGs, Azure Firewall, network segmentation, and secure connectivity. 

• Identify, investigate, and remediate security vulnerabilities, misconfigurations, identity risks, and weaknesses across cloud and hybrid environments. 

• Work closely with the SOC to investigate security incidents, improve security monitoring, tune detections, and enhance threat visibility. 

• Develop and maintain security automation using PowerShell, Python, APIs, Infrastructure as Code such as Terraform and Bicep, and CI/CD pipelines. 

• Define and maintain security engineering standards, security baselines, and implementation guidance. 

• Perform technical security reviews of new infrastructure, cloud services, applications, and architecture changes, and work with teams to remediate identified risks. 

• Troubleshoot complex security issues across cloud, identity, endpoint, network, authentication, and security platforms. 

• Evaluate new security technologies and capabilities through hands-on technical assessment and proof-of-concept activities. 

• Support internal and external audits, risk assessments, remediation activities, and regulatory requirements within a regulated environment. 

Required Qualifications 

• 10+ years of experience in Cyber Security Engineering, Cloud Security, Infrastructure Security, or a related security role. 

• Hands-on experience with Microsoft Sentinel, Microsoft Endpoint Detection & Response (EDR/XDR), Data Loss Prevention (DLP), Microsoft 365, Azure, and Microsoft Entra ID. 

• Experience implementing Conditional Access, PIM, Azure RBAC, Windows Hello for Business, Intune compliance policies, and identity security controls. 

• Experience with Infrastructure as Code (Terraform and/or Bicep), PowerShell and/or Python automation, and DevSecOps methodologies. 

• Strong understanding of vulnerability management, security hardening, network security, DLP, and data protection within enterprise environments. 

• Experience supporting security and compliance initiatives within regulated environments. 

• Excellent communication skills with the ability to work effectively across infrastructure, security, compliance, and business teams. 

Preferred Certifications 

• Microsoft Certified: Azure Security Engineer Associate (AZ-500) 

• Microsoft Certified: Security Operations Analyst (SC-200) 

• Microsoft Certified: Cybersecurity Architect Expert (SC-100) 

• Microsoft Certified: Identity and Access Administrator (SC-300) 

• CompTIA Security+ 

• The annual salary range is about $120,000 to $150,000 based on experience with a 10% annual bonus.

• Medical insurance
• Dental insurance
• Vision insurance
• Commuter benefits
• 401(k) and employer match
• 16 days of PTO 
• Disability benefits
• Paid parental leave
• Catered Lunches
• Annual Summer & Winter Events