remote Cybersecurity Engineer ( US citizens or Green cards only )

Cybersecurity Engineer

This role is responsible for securing enterprise infrastructure, responding to cyber threats, administering Microsoft 365 security, and helping ensure compliance with applicable regulatory requirements. Implement, and maintain enterprise security controls across cloud and on-premises environments. Manage security compliance and assist in security policy creation. Monitor and respond to security alerts, incidents, phishing attempts, malware, and suspicious activity. Perform vulnerability assessments, remediation tracking, and security hardening. Manage endpoint protection systems, email security, MFA, Conditional Access, and identity security controls. Configure and maintain SIEM, logging, and monitoring platforms. Conduct threat hunting and proactive security reviews. Microsoft 365 and Cloud Security: Administer Microsoft 365 security tools including Microsoft Defender, Entra ID (Azure AD), Conditional Access, Intune, Purview, Exchange Online Protection - Implement DLP, retention, and email security policies. Secure remote access, mobile devices, and hybrid cloud infrastructure. Secure Firewalls, VPNs, wireless networks, switches, and servers. Review Firewall rules and network segmentation. Support backup, disaster recovery, and business continuity initiatives. Assist with patch management and secure configuration baselines. Provide escalation support for security-related help desk issues. Lead response efforts during security incidents and outages. Conduct user security awareness training and phishing simulations.

Required Qualifications:

Must have experience on projects for HUD (US Department of Housing and Urban Development) or similar state agencies dealing with public housing programs. At least 5+ years of hands-on experience as a Systems Administrator with IT security or cybersecurity engineering experience. Strong experience with Microsoft 365 security technologies. Experience with: Firewalls and VPN technologies, Endpoint Detection & Response (EDR), Email security platforms, Vulnerability management tools, Windows Server and Hybrid Active Directory, Knowledge of cybersecurity frameworks and compliance standards.

Preferred Qualifications:

Experience supporting government agencies, or other regulated environments. Certifications such as: CISSP, Security+, SC-200, SC-300, AZ-500, CEH