Implementation Engineer

CyberMaxx•Linthicum, MD

About The Position

At CyberMaxx, we believe it is our duty to defend against those committed to wide-scale societal disruption through cyberattacks. We help our customers reduce risk by tightly integrating MDR with offensive security, threat hunting, security research, and digital forensics and incident response (DFIR) to continually adapt to new and evolving threats. Our modern MDR (Managed Detection & Response) approach is tailored to the unique characteristics and risk factors of each customer, enabling us to take full ownership of the response process and, optionally, manage key security controls. By thinking like an adversary and defending like a guardian, we help our customers stay a step ahead of threat actors. At Cybermaxx, we're not just delivering solutions — we're building partnerships. As an Implementation Engineer, you'll be hands-on keyboard deploying the security products that protect our customers from day one. You'll stand up and configure EDR agents, SIEM’s, M365 integrations, deception decoys, and vulnerability scanners, translating each customer's environment into a working, tuned deployment. This is a technical role for someone early in their security engineering career who wants to go deep on tooling while working alongside our SOC, Product and Customer Success teams to bring every onboarding to life. At Cybermaxx, people come first. Whether it's supporting our clients, collaborating with colleagues, or innovating new solutions, we believe in making meaningful connections. If you love solving technical challenges while building trust and relationships—this could be the role for you.

Requirements

A customer-first mindset with the hands-on technical skills to back it up.
1–4 years of experience in security engineering, IT/systems administration, technical implementation, or a related hands-on role, cybersecurity or MSSP/SaaS environments a plus.
Working knowledge of Windows and Linux system administration and IP networking, with general comfort navigating cloud environments (Azure/Entra ID or AWS).
Exposure to one or more security tooling categories, XDR, SIEM, vulnerability scanning. We'll help you grow in the rest.
Familiarity with Microsoft 365 / Entra ID administration and security configuration is a strong plus.
Experience with Elastic, Ansible, or scripting (PowerShell, Python, Bash) for automating deployments.
Strong organizational skills, you can manage several customer deployments at once without dropping the ball.
Solid communication skills, verbal and written, you can make the technical feel human.
Curious and proactive, you like troubleshooting, you anticipate problems, and you take ownership of solutions.
Comfort with documentation and ticketing/project tools (Jira, Confluence, ServiceNow).

Responsibilities

Deploy the stack: Install, configure, and validate EDR agents across Windows, Linux, and macOS endpoints, ensuring healthy coverage and reporting.
Build the pipeline: Stand up SIEM ingestion, deploying sensors, onboarding log sources, configuring parsers and connectors, and confirming data is flowing cleanly into detection.
Integrate M365: Connect Microsoft 365 / Entra ID tenants, configuring audit logging, Defender integrations, and conditional access telemetry for monitoring.
Plant the traps: Deploy deception decoys and honeytokens to expand detection coverage across customer environments.
Scan for risk: Configure and schedule vulnerability scanners, validate authenticated scanning, and confirm results are reporting accurately.
Tune and validate: Test each deployment end to end, troubleshoot agent and connectivity issues, and confirm telemetry is reaching our SOC.
Document the work: Maintain clear configuration records, and onboarding notes so deployments are repeatable and supportable.
Collaborate across teams: Partner with Pre-Sales, Product, SOC, and Customer Success to deliver tailored, high-quality deployments.
Guide the customer: Run kickoff and onboarding sessions, set clear expectations, and serve as a technical point of contact through go-live.
Hand off with care: Support a smooth transition to SOC monitoring, post-deployment support, and feed lessons learned back into our process