Security Analytics Architect

Description OpenKyber is seeking an experienced Cybersecurity Consultant to support the design, implementation, and management of enterprise application allowlisting solutions across Windows and Linux environments. This consultant will play a key role in strengthening endpoint security by implementing application control technologies, reducing the attack surface, and collaborating with cross-functional IT and cybersecurity teams. The ideal candidate is highly self-driven, has deep hands-on experience with Microsoft and Red Hat application control technologies, and is comfortable leading technical workstreams with minimal supervision. Responsibilities:

• Design, implement, and maintain enterprise application allowlisting policies for Windows and Linux environments.
• Configure and manage Microsoft AppLocker policies.
• Deploy, tune, and maintain Windows Defender Application Control (WDAC) / Application Control for Business.
• Implement and administer Red Hat fapolicyd and Satellite.
• Define trusted applications using publisher, hash, and path-based rules.
• Integrate application control logs with SIEM platforms, including Splunk, for monitoring and alerting.
• Develop and automate policy deployment using Group Policy, Microsoft Intune, and Ansible.
• Enforce default-deny execution controls to reduce endpoint attack surface.
• Collaborate with infrastructure, networking, cybersecurity, application, and operations teams throughout implementation and testing.
• Create technical documentation, deployment guides, standards, and audit documentation.
• Support change management processes and ensure all implementations follow established governance procedures.
• Report on application allowlisting effectiveness and recommend continuous improvements.

• 4+ years of hands-on cybersecurity or endpoint security experience.
• Strong experience with Microsoft AppLocker.
• Hands-on experience with Windows Defender Application Control (WDAC) / Application Control for Business.
• Experience implementing and managing Red Hat and Satellite.
• Experience with SIEM platforms, preferably Splunk, for log analysis and monitoring.
• Experience integrating Microsoft Intune with Microsoft Defender for Endpoint (MDE).
• Experience developing or deploying automation using Group Policy, Intune, or Ansible.
• Ability to work independently in a fully remote, cross-functional environment.
• Strong communication, collaboration, and problem-solving skills.

• Industry cybersecurity certifications (Security+, CISSP, GIAC, Microsoft Security, or similar).
• Experience supporting highly regulated environments.
• Experience working with enterprise endpoint security and application control initiatives.

• Microsoft AppLocker
• Windows Defender Application Control (WDAC) / Application Control for Business
• Red Hat fapolicyd & Satellite
• Microsoft Intune
• Microsoft Defender for Endpoint (MDE)
• Splunk (or comparable SIEM platforms)
• Group Policy
• Ansible

Technology Doesn't Change the World, People Do. OpenKyber is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. OpenKyber works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the OpenKyber app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information. 2025 OpenKyber. An Equal Opportunity Employer. M/F/Disability/Veterans.

For applications and inquiries, contact:View email address on us.fitly.work