Senior Cybersecurity Engineer

BP•Grapevine, TX

6d•$95,000 - $135,000•Remote

About The Position

We are seeking a Senior Cybersecurity Engineer to join our fully remote team and help strengthen our cloud-first security posture. Working directly with the CISO, you will support and secure a modern SaaS-heavy environment with minimal internal infrastructure. Our enterprise relies on Microsoft 365 with E5 licensing, Azure Sentinel for SIEM, and other cloud-native tools to protect endpoints, identities, and collaboration platforms. This role is ideal for someone passionate about automation, continuous improvement, and securing users in a highly distributed environment.

Requirements

5+ years of experience in cybersecurity with a focus on cloud-first environments.
Expert-level knowledge of Microsoft 365 E5 security capabilities and Microsoft Defender suite.
Proficiency with Azure Sentinel, including KQL, rule tuning, and automation.
Strong understanding of SaaS security and endpoint protection in a remote-first context.
Experience with email threat protection platforms (e.g., Abnormal Security, Proofpoint, or similar).
Self-starter with the ability to work independently and communicate effectively in a remote team.

Nice To Haves

Certifications: MS-500, AZ-500, SC-200, or equivalent.
Scripting or automation (PowerShell, KQL, Logic Apps, etc.).
Familiarity with Zero Trust, MITRE ATT&CK, and secure-by-design principles.

Responsibilities

Security Engineering & Operations
Maintain, optimize, and secure Microsoft 365 E5 features such as Microsoft Defender for Endpoint, Defender for Identity, and Purview Information Protection.
Operate and enhance Azure Sentinel, including analytics rules, alert tuning, automation (Logic Apps), and incident workflows.
Manage email security tooling and other third-party integrations supporting cloud security.
Support the security of our OT systems and environments through collaborative involvement with Operations, creative application of security controls, and mitigation of current threats.
Cloud & SaaS Security
Enforce identity-centric controls including MFA, conditional access, just-in-time access, and least privilege.
Monitor threats across Microsoft 365, Azure AD, and third-party SaaS tools using native and integrated telemetry.
Contribute to SaaS onboarding assessments and secure configuration posture.
Collaboration & Risk Reduction
Partner with IT, engineering, operations, and business teams to embed security into daily operations and new projects.
Provide clear technical guidance and documentation to help internal teams follow secure practices.
Threat Detection & Continuous Improvement
Proactively identify and remediate risks through configuration reviews, security assessments, and threat hunting.
Stay current on evolving cloud threats and contribute to the continuous tuning of defenses.