Cybersecurity Engineer - WORK FROM HOME - US Select States

Engineer
- Cybersecurity Operations

While this position is work from home, we are only registered and can proceed with qualified candidates who reside and will work in one of the following US states: AL, AZ, FL, GA, MI, MS, NE, NC, OH, OK, TN, TX. No exceptions. No relocation assistance is available.

Must be eligible to work in the US without employment sponsorship.

Job Title:

Engineer
- Cybersecurity Operations

Department: IT Security & Support FLSA Status:
Exempt Job Status: FT

Reports To:

Director of Fraud Prevention & Risk

Work Schedule:

Remote, core working hours between 9am-3pm EST, but occasional after-hours support as needed.

Position Summary:

Cybersecurity Engineer with a primary focus on vulnerability and patch management, especially in Microsoft Azure. This role is responsible for keeping our cloud servers, workloads, and endpoints securely configured and up to date. The ideal candidate has practical experience running patch cycles and remediating vulnerabilities in Azure, coordinating with IT teams, and steadily driving down risk.

What You Will Focus On:

• 60% – Azure vulnerability & patch management
• 30% – cloud servers / endpoint patching and configuration hardening
• 10% – Basic security operations support (ticket triage, simple incident support, reporting)

Key Responsibilities:

Azure Vulnerability & Patch Management (Primary)

• Own the vulnerability and patch management process in Azure for VMs, PaaS workloads, and core services.

• Use tools such as Defender for Cloud / Azure Security Center, Azure Security Center, Azure Update Management, Intune, and vulnerability scanners (e.g., Tenable Nessus) to:

o Identify and validate vulnerabilities and missing patches

o Classify and prioritize findings (critical/high/medium)

o Coordinate and track remediation to closure

• Work with infrastructure/Dev Ops teams to define standard patching windows, maintenance plans, and rollback procedures.

• Monitor Azure security posture dashboards and ensure patch and configuration baselines are maintained.

Cloud & Endpoint Patch Management

• Support patching and configuration hardening for cloud servers and endpoints, leveraging existing IT tools (e.g., SCCM, Intune, or equivalent).

• Align on prem patching cadence with Azure patching to reduce overall risk and avoid drift.

• Validate successful deployment of patches and address failed/exception hosts with IT.

Coordination, Reporting & Process Improvement

• Work closely with IT and Dev Ops to plan patch windows, test changes, and minimize business disruption.

• Maintain clear documentation of vulnerability backlogs, exceptions, approvals, and remediation status.

• Produce simple, understandable reports for management on:

o Outstanding critical/high vulnerabilities

o Patch compliance by system group/environment

o Trends over time (improvement vs. backlog growth)

• Contribute to and improve standard operating procedures for vulnerability and patch management.

Security Operations Support (Secondary)

• Assist with triage of basic security tickets and alerts related to vulnerabilities, misconfigurations, or outdated software.

• Participate in an on call rotation for critical patching issues or security incidents related to your scope.

• Support incident response by quickly assessing patch/vulnerability exposure when needed.

Required Skills and Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field; or equivalent hands on experience.

• Experience in a security, systems, or cloud engineering role with ideally direct responsibility for patching and/or vulnerability remediation.

• Exposure to or demonstrated hands on experience with Microsoft Azure in one or more of the following:

o Azure VMs and Azure Update Management

o Defender for Cloud / Azure Security Center

o Intune or similar for endpoint management

• Practical experience with at least one vulnerability scanning tool (e.g., Tenable Nessus, Qualys, Rapid7) and interpreting/prioritizing results.

• Strong understanding of:

o Operating system patching (Windows Server; Linux a plus)

o Basic configuration hardening concepts (CIS benchmarks, least privilege, etc.)

• Ability to work through patching conflicts, testing,…