Description

You will own the hardening, governance, and vulnerability management of Windows and Linux endpoints across the organization.

This role is remote.

Responsibilities

• Implement and maintain CIS Benchmark hardening for Windows and Linux systems.
• Manage Active Directory security governance and Group Policy Objects (GPO).
• Administer endpoint protection platforms including Defender, CrowdStrike, SentinelOne, or Trellix.
• Conduct vulnerability management using Tenable, Qualys, or Rapid7.
• Automate security configurations and policy enforcement using PowerShell.

Required Skills

• 5+ years of experience with Windows Server and Active Directory administration.
• Deep knowledge of CIS Benchmark standards for endpoint hardening.
• Proficiency in Group Policy (GPO) security and governance.
• Hands-on experience with endpoint security platforms (Defender, CrowdStrike, SentinelOne, Trellix, or Symantec).
• Experience with vulnerability management tools such as Tenable, Qualys, or Rapid7.
• Understanding of core security controls: PAM, MFA, encryption, application whitelisting, and device control.
• Ability to write PowerShell scripts for security automation.

Preferred Skills

• CIS Secure Suite Certified Practitioner (CIS-CP) or relevant platform certifications (e.g., SC-300, AZ-500, SC-200, CCFA, SIREN).
• Familiarity with security frameworks like NIST or ISO 27001.

Key Skills

Education

Any Gradute