Senior Cyber Security Engineer

Job Summary:

We are seeking a highly technical Senior Cyber Security/Hygiene Engineer to own the continuous coverage and operational health of security controls across endpoints, servers, cloud workloads, identities, applications, and infrastructure.

Responsibilities:

Security Tool Coverage & Health

• Continuously measure deployment, communication, configuration, telemetry, version, policy assignment, and operational health of critical security controls.

• Identify endpoints, servers, cloud workloads, network devices, identities, applications, and other assets missing required security agents, integrations, sensors, or controls.

• Detect controls that are installed but unhealthy, stale, disconnected, disabled, outdated, misconfigured, or no longer producing expected telemetry.

Enterprise Security Control Hygiene

• EDR and endpoint detection and response agents, policies, sensors, and telemetry.

• PAM and privileged-access coverage, integrations, vaulting, connectors, and enforcement points.

• DLP agents, policies, integrations, and coverage across endpoints and supported data channels.

• SIEM log-source onboarding, ingestion continuity, parsing health, data freshness, and expected telemetry.

AI-Driven Continuous Coverage & Break/Fix

• Build and operate AI-assisted cyber hygiene capabilities that continuously evaluate security-control deployment and health across the enterprise.

• Use AI to reconcile asset inventories and telemetry across EDR, PAM, DLP, SIEM, endpoint security, vulnerability management, cloud security, and other required controls.

• Automatically identify assets where expected controls are missing, unhealthy, stale, disconnected, misconfigured, outdated, or not producing expected telemetry.

• Develop AI-assisted workflows that correlate evidence across security and infrastructure platforms, investigate anomalies, and determine the likely cause of control failures.

• Use AI to accelerate break/fix by identifying probable remediation actions, enriching incidents with asset and configuration context, and routing work to the appropriate engineering owner.

Asset Reconciliation & Control Validation

• Correlate data from security platforms, infrastructure and cloud inventories, Active Directory or Entra ID, endpoint-management systems, CMDB sources, and other authoritative repositories.

• Distinguish documented exclusions and lifecycle states from genuine security-control gaps.

• Identify orphaned assets, stale records, duplicate records, unmanaged systems, and unexpected assets surfaced through security telemetry.

Technical Automation & Observability

• Build Python, PowerShell, SQL, and API-based automation that continuously reconciles asset populations and security-control state.

• Develop dashboards and health views that show expected control coverage, actual coverage, current failures, aging, ownership, exceptions, and remediation status.

• Automate enrichment with asset owner, business service, environment, criticality, operating system, location, and lifecycle information.

Qualifications:

• 5+ years of hands-on security engineering, infrastructure security, endpoint security, vulnerability management, security operations, or closely related experience.

• Strong understanding of enterprise security controls and how agents, sensors, connectors, policies, integrations, and telemetry pipelines operate.

• Hands-on experience administering or troubleshooting several major technologies across EDR, PAM, DLP, SIEM, endpoint security, vulnerability management, cloud security, or related domains.

• Strong understanding of asset-management challenges across endpoints, servers, cloud workloads, network devices, identities, and applications.

• Experience diagnosing agent deployment, connectivity, version, certificate, policy, integration, configuration, and telemetry problems.

• Strong troubleshooting skills across Windows, Linux, cloud, networking, identity, endpoint management, and enterprise software-distribution environments.

• Experience working with REST APIs and extracting, normalizing, correlating, and reconciling data from enterprise platforms.

• Proficiency in Python, PowerShell, SQL, or equivalent automation and data-engineering technologies.

• Experience creating operational dashboards, security metrics, control-health indicators, and remediation workflows.

• Strong analytical mindset and willingness to investigate discrepancies until the underlying cause is understood and verified as resolved.

Preferred AI & Automation Experience:

• Practical experience using LLMs or AI-assisted technologies in security engineering, IT operations, reliability engineering, or a related technical function.

• Ability to determine when a problem requires deterministic automation, AI-assisted reasoning, or human investigation.

• Experience building API integrations, agentic workflows, prompt-based analysis, or lightweight remediation pipelines.

• Ability to provide structured asset, configuration, policy, telemetry, and ownership context to AI systems.

• Understanding of AI limitations, false conclusions, incomplete evidence, and the need to validate corrective actions.

Preferred Qualifications:

• Experience in banking, financial services, healthcare, or another regulated industry.

• Experience supporting regulatory, audit, or risk evidence for technical security controls.

• Experience with enterprise environments containing thousands of assets and multiple authoritative inventory sources.

• Experience building cross-platform asset reconciliation, control validation, or security-tool health processes.

• Experience integrating security-platform data into Splunk or an equivalent analytics platform.

• Experience with endpoint management, identity security, PAM, DLP, vulnerability management, cloud security, or data-security technologies.

• Relevant certifications in security engineering, cloud, endpoint management, identity, vulnerability management, or security operations.