Description

Job Description

Description OpenKyber is seeking an experienced Cybersecurity Consultant to support the design, implementation, and management of enterprise application allowlisting solutions across Windows and Linux environments. This consultant will play a key role in strengthening endpoint security by implementing application control technologies, reducing the attack surface, and collaborating with cross-functional IT and cybersecurity teams. The ideal candidate is highly self-driven, has deep hands-on experience with Microsoft and Red Hat application control technologies, and is comfortable leading technical workstreams with minimal supervision.

Responsibilities:

• Design, implement, and maintain enterprise application allowlisting policies for Windows and Linux environments.
• Configure and manage Microsoft AppLocker policies.
• Deploy, tune, and maintain Windows Defender Application Control (WDAC) / Application Control for Business.
• Implement and administer Red Hat fapolicyd and Satellite.
• Define trusted applications using publisher, hash, and path-based rules.
• Integrate application control logs with SIEM platforms, including Splunk, for monitoring and alerting.
• Develop and automate policy deployment using Group Policy, Microsoft Intune, and Ansible.
• Enforce default-deny execution controls to reduce endpoint attack surface.
• Collaborate with infrastructure, networking, cybersecurity, application, and operations teams throughout implementation and testing.
• Create technical documentation, deployment guides, standards, and audit documentation.
• Support change management processes and ensure all implementations follow established governance procedures.
• Report on application allowlisting effectiveness and recommend continuous improvements.

Required Qualifications:

• 4+ years of hands-on cybersecurity or endpoint security experience.
• Strong experience with Microsoft AppLocker.
• Hands-on experience with Windows Defender Application Control (WDAC) / Application Control for Business.
• Experience implementing and managing Red Hat and Satellite.
• Experience with SIEM platforms, preferably Splunk, for log analysis and monitoring.
• Experience integrating Microsoft Intune with Microsoft Defender for Endpoint (MDE).
• Experience developing or deploying automation using Group Policy, Intune, or Ansible.
• Ability to work independently in a fully remote, cross-functional environment.
• Strong communication, collaboration, and problem-solving skills.

Preferred Qualifications:

• Industry cybersecurity certifications (Security+, CISSP, GIAC, Microsoft Security, or similar).
• Experience supporting highly regulated environments.
• Experience working with enterprise endpoint security and application control initiatives.

Technical Environment:

• Microsoft AppLocker
• Windows Defender Application Control (WDAC) / Application Control for Business
• Red Hat fapolicyd & Satellite
• Microsoft Intune
• Microsoft Defender for Endpoint (MDE)
• Splunk (or comparable SIEM platforms)
• Group Policy
• Ansible

Key Skills

Education

Any Graduate