Security Engineer (Windows and Linux)

Role: Security Engineer (Windows and Linux) Location: Bellevue, WA FTE Job Description Experience Level: (OS Security & Baseline Operations) 7-12 years overall IT experience 3+ years in OS security / baseline operations 1-3 years in a technical lead or people-management role Core Technical Skills Windows Security Windows Server & Client security hardening (2016/2019/2022, Windows 10/11) Group Policy (GPO) design, enforcement, and auditing Windows security baselines (CIS, Microsoft Security Baselines) Patch management and vulnerability remediation Active Directory security (LDAP, Kerberos, NTLM, privileged access) PowerShell scripting for security automation and compliance checks Windows event logging, audit policies, and incident analysis Linux Security: Security hardening for RHEL, Ubuntu, SUSE, CentOS . Linux security baselines (CIS, DISA STIGs) . User/group management, sudo policies, PAM . SELinux/AppArmor configuration and troubleshooting . SSH hardening, key management, and access controls . Bash/Python scripting for automation and compliance . Log analysis (syslog, auditd) Security & Compliance: OS baseline definition, validation, and continuous compliance monitoring . Vulnerability management (Qualys, Tenable, Defender, etc.) . Secure configuration management and drift detection . Incident response support and root cause analysis . Experience with regulatory/compliance frameworks: CIS, NIST, ISO 27001, SOX (nice to have) . Security documentation, SOPs, and audit evidence preparation . Tooling & Platforms (Preferred): Endpoint / OS security tools (Microsoft Defender, CrowdStrike, etc.) . Configuration management (Ansible, SCCM, Intune, Puppet, Chef) . Ticketing & workflow tools (ServiceNow, Azure DevOps, Jira) . Cloud OS security exposure (Azure / AWS - IaaS VMs) . Monitoring and SIEM tools (Splunk, Sentinel - nice to have) Operational & Analytical Skills: Baseline exception management and risk assessment . OS build standards and golden image reviews . Troubleshooting complex OS-level security issues. Strong documentation and reporting skills: Metrics/KPIs for security posture and compliance health . People Management. AceStack LLC