Senior Cybersecurity Engineer

Location

Remote, Southeast US

What you'll do

• Lead technical work on client engagements under Principal Engineer oversight, owning design implementation, build quality, and control validation
• Implement and harden Microsoft security controls including Entra ID (conditional access, privileged identity, identity governance), Microsoft 365 Defender, Exchange Online Protection, Intune, Windows endpoint baselines, Active Directory tiering, and Azure security posture
• Roll out changes through pilot groups following client change processes with tested rollback plans and scheduled maintenance windows
• Deploy and configure endpoint and email security platforms (CrowdStrike Falcon, Microsoft Defender) including prevention policies, exclusions, log forwarding, and SIEM API connectors
• Stand up vulnerability scanning and patch compliance reporting, tracking remediation with client IT teams
• Execute CIS Controls and NIST CSF gap assessments, translating findings into prioritized remediation plans and implementing them with client IT teams
• Implement firewall and segmentation changes, MFA and SSO integration with third-party SaaS, and backup verification as required
• Direct and review daily work of junior engineers and interns assigned to engagements
• Serve as day-to-day technical contact for client IT teams, including on-site work when necessary
• Automate repeatable tasks using PowerShell with Microsoft Graph, Azure CLI, and vendor APIs for configuration audits, baseline deployment, and evidence collection
• Maintain scripts and configurations in Git with change history and peer review
• Produce as-built documentation, runbooks, and evidence packages; train client administrators on implemented solutions
• Participate in scoping calls, estimate technical work, and identify scope creep requiring change orders
• Maintain current task status, hours, and test evidence; report progress to Principal Engineer and project coordinator
• Complete at least two professional development goals annually (one technical, one professional skill)

What you need

• 5+ years hands-on security engineering with production ownership of Microsoft identity and endpoint controls (Entra ID, Active Directory, Microsoft 365 security, Intune)
• Azure security experience (Defender for Cloud, RBAC, network security)
• Strong PowerShell scripting skills
• Experience with REST APIs, particularly Microsoft Graph
• Git version control proficiency (clone, branch, commit, pull request)
• Experience with at least one EDR platform (CrowdStrike Falcon, Microsoft Defender for Endpoint, or comparable)
• Knowledge of SIEM log source requirements for security systems
• Working knowledge of CIS Controls, NIST CSF, and NIST SP 800-171
• Evidence-based validation methodology for implemented controls
• Excellent written and oral communication skills
• Ability to present findings to client IT leadership
• Bachelor's degree or equivalent training and experience

Nice to have

• Python programming
• Experience implementing controls for regulated or defense-contractor clients
• Microsoft certifications: SC-300, AZ-500, or SC-100
• CrowdStrike CCFA certification
• GIAC GDSA or GCED certification
• CISSP certification

Benefits

• We reimburse 100% of healthcare premiums for you and your entire family
• Minimum three weeks of PTO, and taking it is required. You can take more if you ensure your work is done.
• Flexible hours; you manage your own schedule around client commitments
• Vizius buys your books (a first-year reading list, in the format you prefer)

About Vizius Group

We're a 14-person cybersecurity firm in Greenville, SC. Most of our work is helping midsize companies understand where they actually stand and then fixing it, which sometimes means telling them they need less than they thought. You'll be in front of clients early and own outcomes end to end, with experienced people a call away when you're stuck.

Remote, with most of the team in the Greenville, SC area. You set your own hours as long as you're reachable 9 to 5-ish and tell people when you won't be. A normal week is about 50 hours including meetings, training, and admin.

Three weeks PTO (more within reason), plus Good Friday, Memorial Day, July 4, Labor Day, Thanksgiving and the day after, and the office is closed from Christmas Eve through New Year's Day. Nobody here thinks more of you for working on vacation.

Next steps: visit https://vizius.com/careers to learn more and apply.

Pay: $70,000.00 - $170,000.00 per year

Work Location: Remote