Cybersecurity Engineer - WORK FROM HOME - US Only Select States
$80,000–$120,000 year
RemoteArizona, United States or Texas, United States
Job Summary
Own the vulnerability and patch management process in Microsoft Azure for VMs, PaaS workloads, and core services. Use tools such as Defender for Cloud, Azure Security Center, and Tenable Nessus to identify, classify, and track remediation of vulnerabilities. Coordinate with infrastructure and DevOps teams to define standard patching windows, maintenance plans, and rollback procedures while monitoring security posture dashboards. Support configuration hardening for cloud servers and endpoints, validate successful patch deployment, and address failed hosts. Assist with triage of basic security tickets and participate in an on-call rotation for critical patching issues or security incidents. Produce clear reports on outstanding vulnerabilities, patch compliance, and trends for management. Core working hours are 9am-3pm EST with occasional after-hours support required.
Required Qualifications
- Must be eligible to work in the US without employment sponsorship
- Reside and will work in one of the following US states: AL, AZ, FL, GA, MI, MS, NE, NC, OH, OK, TN, TX
- Bachelor's degree in Computer Science, Information Security, or related field; or equivalent hands on experience
- Experience in a security, systems, or cloud engineering role with ideally direct responsibility for patching and/or vulnerability remediation
- Exposure to or demonstrated hands on experience with Microsoft Azure in one or more of the following: Azure VMs and Azure Update Management, Defender for Cloud / Azure Security Center, Intune or similar for endpoint management
- Practical experience with at least one vulnerability scanning tool (e.g., Tenable Nessus, Qualys, Rapid7) and interpreting/prioritizing results
- Strong understanding of Operating system patching (Windows Server; Linux a plus)
- Strong understanding of Basic configuration hardening concepts (CIS benchmarks, least privilege, etc.)
- Ability to work through patching conflicts, testing, and exceptions with IT and application owners
- Clear, concise communication skills
- Core working hours between 9am-3pm EST
- Participation in an on call rotation for critical patching or security issues
- Uninterrupted virtual workspace
- Internet work speed requirement of 100 MBps or better
Desired Qualifications
- Experience in a cloud first or hybrid environment with a significant Azure footprint
- Prior work in a vulnerability management or patch management–focused role
- Familiarity with Defender for Cloud, Azure Security Center, Azure Policy
- Familiarity with Intune, SCCM, or similar endpoint management tools
- Familiarity with NIST / CIS Controls as they relate to patching and configuration management
- Scripting/automation experience (e.g., PowerShell, Azure CLI, Python) to streamline patching and reporting
- Exposure to SIEM tools (e.g., Microsoft Sentinel, Splunk) sufficient to pull data for reporting or basic investigations
- Linux a plus
- Azure Policy
- SCCM, or similar tools
- basic Python (nice to have)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.