Senior Cyber Security Engineer

Monex USA•Washington, DC

6d•$70,000 - $100,000•Onsite

About The Position

As a Senior Cyber Security Engineer, you will be responsible for securing the organization’s cloud and hybrid infrastructure across Azure, Microsoft 365, and on-premises environments. You will serve as the technical authority for cloud security, working closely with the SOC, Infrastructure, and IT Operations teams. The role will have a global footprint and requires collaborative working with offices across the globe including Europe and the USA.

Requirements

7-12 years of experience in Endpoint Engineering, Infrastructure Security, Cloud Security, or a related engineering role.
Hands-on experience with Microsoft Intune, Microsoft 365, Azure, and Microsoft Entra ID.
Strong experience with Microsoft Defender technologies, Microsoft Sentinel, Endpoint Detection & Response (EDR/XDR), Data Loss Prevention (DLP), and enterprise endpoint security.
Experience implementing Conditional Access, Zero Trust principles, Windows Hello for Business, BitLocker, compliance policies, and identity security controls.
Knowledge of Azure security services, Azure Policy, RBAC, PIM, networking security, and cloud governance best practices.
Experience with Infrastructure as Code (Terraform and/or Bicep), PowerShell and/or Python automation, and DevSecOps methodologies.
Strong understanding of Windows 11 security, endpoint hardening, vulnerability management, patching, networking concepts, and enterprise mobility management.
Experience supporting security and compliance initiatives within regulated environments.
Excellent communication skills with the ability to work effectively across infrastructure, security, compliance, and business teams.

Nice To Haves

Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Microsoft Certified: Security Operations Analyst (SC-200)
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Microsoft Certified: Identity and Access Administrator (SC-300)
CompTIA Security+

Responsibilities

Design, implement, and maintain secure cloud, endpoint, and identity management solutions across Microsoft Azure, Microsoft 365, Intune, and Entra ID environments.
Manage and optimize the Microsoft security stack, including Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender XDR, and Microsoft Sentinel.
Deploy, secure, and manage Windows, iOS, and Android devices through Microsoft Intune, including compliance policies, security baselines, encryption, application protection, and device lifecycle management.
Support the rollout, adoption, and ongoing management of Windows Hello for Business, Conditional Access, Multi-Factor Authentication, and Zero Trust security controls.
Implement and maintain Azure security governance, including Azure Policy, RBAC, Privileged Identity Management (PIM), Identity Governance, and compliance frameworks.
Manage cloud and network security controls, including Azure Firewall, NSGs, Private Endpoints, VPN connectivity, segmentation, and secure access solutions.
Monitor and improve security posture through Secure Score, vulnerability management, compliance reporting, and continuous control optimization.
Collaborate with Security Operations teams to investigate incidents, tune detections, respond to alerts, and improve overall threat visibility.
Automate security, compliance, and deployment processes using PowerShell, Python, Infrastructure as Code (Terraform/Bicep), and CI/CD pipelines.
Support internal and external audits, risk assessments, remediation efforts, and regulatory compliance requirements within a regulated environment.