Description

You design, implement, and manage enterprise application allowlisting solutions across Windows and Linux environments.

This role is remote.

Responsibilities

• Configure and manage Microsoft AppLocker policies and Windows Defender Application Control (WDAC) for endpoint security.
• Implement and administer Red Hat fapolicyd and Satellite to enforce application control on Linux systems.
• Define trusted applications using publisher, hash, and path-based rules to reduce the attack surface.
• Integrate application control logs with SIEM platforms, including Splunk, for monitoring and alerting.
• Automate policy deployment using Group Policy, Microsoft Intune, and Ansible.

Required Skills

• 5+ years of hands-on cybersecurity or endpoint security experience.
• Strong experience with Microsoft AppLocker and Windows Defender Application Control (WDAC).
• Hands-on experience with Red Hat fapolicyd and Satellite.
• Experience integrating Microsoft Intune with Microsoft Defender for Endpoint (MDE).
• Proficiency in log analysis and monitoring using Splunk or comparable SIEM platforms.
• Experience developing or deploying automation using Group Policy, Intune, or Ansible.
• Ability to work independently in a fully remote, cross-functional environment.

Preferred Skills

• Industry cybersecurity certifications (Security+, CISSP, GIAC, Microsoft Security, or similar).
• Experience supporting highly regulated environments.

Key Skills

Education

Any Graduate