Cyber Security Engineer

Rozmith is hiring a Cyber Security Engineer to build and run the security controls that keep regulated clients protected and audit-ready. This role is fully remote and open to candidates in the US, UK and Europe.

Rozmith is a security-first managed IT and cybersecurity partner for insurance, financial services and other regulated firms across the US, UK and Europe. We run our clients' IT and security day to day and handle the IT side of their mergers and acquisitions, with teams in Atlanta, London and Skopje.

You'll design, deploy and tune security controls across our clients' Microsoft environments: identity, endpoint, email, cloud and network. You'll take escalations from our analysts, lead remediation, and set the standards for how we secure a client from day one.

• Deploy and tune Crowd Strike Falcon, Sentinel One, Microsoft Defender XDR and Defender for Cloud across client tenants
• Run email security with Abnormal Security and Mimecast
• Harden Microsoft 365, Entra , Intune and Azure against CIS benchmarks and Secure Score
• Design and enforce Conditional Access, phishing-resistant MFA, PIM and privileged access
• Build Sentinel analytics rules, workbooks and automated playbooks
• Lead remediation of escalated incidents, from containment to root cause
• Own vulnerability management with Tenable, Axonius and Tanium
• Run identity governance in Lumos and privileged access with Delinea
• Roll out data and AI security controls with Purview, Varonis and Firefly
• Map controls to CIS, NIST, ISO 27001 and SOC 2, and produce audit evidence in Apptega
• Coach analysts and review their investigations

• 3–5 years in security engineering, with at least 2 years primarily on Microsoft security
• Hands‑on deployment of an enterprise EDR (Crowd Strike or Sentinel One) alongside Sentinel and Defender XDR
• Strong Entra l Access, MFA, PIM and identity protection
• Experience hardening Microsoft 365 and Intune‑managed devices
• KQL for detections and hunting;
  Power Shell for automation
• Working knowledge of firewalls and network security;
  Fortinet helps
• Incident response experience from containment to lessons learned
• Experience producing control evidence for audits
• Clear written English: you can explain risk to an executive and an engineer NICE TO HAVE
• MSP or multi‑tenant experience using Azure Lighthouse
• Regulated environments and frameworks such as SOC 2, GDPR, NIS2 or DORA
• Security integration during mergers and acquisitions
• Identity governance and PAM:
  Lumos, SailPoint or Delinea

Microsoft Sentinel, KQL, Defender XDR, Crowd Strike Falcon, Sentinel One, Tanium, Intune, Tenable, Axonius, Abnormal Security, Mimecast, Entra , PIM, Lumos, Delinea, Purview, Varonis, Firefly, Defender for Cloud, Snyk, Forti Gate, Forti Manager, Forti Analyzer, Fortinet SASE, Apptega

• Fully remote from the US, UK or Europe
• Hours overlap with US Eastern business hours
• Shared after‑hours on‑call rotation
• Company laptop, paid certification prep and exam vouchers

Rozmith is an equal opportunity employer. We make hiring decisions based on qualifications and merit.