REMOTE Cybersecurity Engineer ( W2 , no C2C

REMOTE Cybersecurity Engineer

This role is responsible for securing enterprise infrastructure, responding to cyber threats, administering Microsoft 365 security, and helping ensure compliance with applicable regulatory requirements. Implement, and maintain enterprise security controls across cloud and on-premises environments. Manage security compliance and assist in security policy creation. Monitor and respond to security alerts, incidents, phishing attempts, malware, and suspicious activity. Perform vulnerability assessments, remediation tracking, and security hardening.

Manage endpoint protection systems, email security, MFA, Conditional Access, and identity security controls. Configure and maintain SIEM, logging, and monitoring platforms. Conduct threat hunting and proactive security reviews. Microsoft 365 and Cloud Security:
Administer Microsoft 365 security tools including Microsoft Defender, Entra  (Azure AD), Conditional Access, Intune, Purview, Exchange Online Protection. Implement DLP, retention, and email security policies. Secure remote access, mobile devices, and hybrid cloud infrastructure. Secure Firewalls, VPNs, wireless networks, switches, and servers. Review Firewall rules and network segmentation. Support backup, disaster recovery, and business continuity initiatives. Assist with patch management and secure configuration baselines.

Provide escalation support for security-related help desk issues. Lead response efforts during security incidents and outages. Conduct user security awareness training and phishing simulations.

Required Qualifications:

Must-have domain experience:
Ideally, experience on projects for HUD (the US Department of Housing and Urban Development) or similar state or municipal agencies involved in public housing programs. Alternatively, experience on projects for civilian US federal agencies (outside the defense, intelligence, and national security sectors) or similar state agencies, or experience in highly regulated industries such as insurance, banking, or healthcare. Experience implementing security controls and solutions from scratch - not just maintaining or monitoring established systems - with a working knowledge of security best practices and the ability to determine what to implement and how to execute it effectively.

At least 5+ years of hands-on IT security / cybersecurity engineering experience. Strong experience with Microsoft 365 security technologies specifically. Experience with:
Firewalls and VPN technologies, Endpoint Detection & Response (EDR), Email security platforms, Vulnerability management tools, Windows Server and Hybrid Active Directory, Knowledge of cybersecurity frameworks and compliance standards.

Preferred Qualifications:

Certifications such as: CISSP, Security+, SC-200, SC-300, AZ-500, CEH