Senior Cyber Hygiene Engineer (AI-Driven)

Rising Tide Digital Inc; Taguig; Vor Ort; PHP 1.800.000 - 2.400.000; Vollzeit

Zusammenfassung

Rising Tide Digital Inc. seeks a highly technical Senior Cyber Hygiene Engineer to own the continuous coverage and operational health of security controls across endpoints, servers, cloud workloads, identities, applications, and infrastructure.

You will measure deployment, telemetry, and policy coverage; identify missing or unhealthy controls; and build AI-assisted workflows to accelerate remediation. The role requires deep experience with EDR, PAM, DLP, SIEM, and data integration across

Qualifikationen

• 5+ years of hands-on security engineering or related roles.
• Experience with EDR, PAM, DLP, SIEM and related security platforms.
• Strong troubleshooting across Windows, Linux, and cloud environments.
• Experience with REST APIs and data integration.
• Proficiency in Python, PowerShell, SQL, or equivalent automation and data engineering technologies.

Aufgaben

• Monitor deployment, telemetry, and health of critical security controls.
• Identify assets missing required security agents and controls.
• Detect unhealthy, outdated, or misconfigured controls.
• Build AI-assisted cyber hygiene capabilities across enterprise.
• Develop AI-assisted workflows to investigate anomalies and determine remediation actions.
• Correlate data across security platforms, inventories, and identity management systems.
• Identify exclusions vs gaps and orphaned assets surfaced by telemetry.

Kenntnisse

Security engineering

Endpoint security

Vulnerability management

Security operations

REST APIs

Python

PowerShell

SQL

Dashboards & metrics

Tools

EDR

PAM

DLP

SIEM

Jobbeschreibung

We are seeking a highly technical Senior Cyber Hygiene Engineer to own the continuous coverage and operational health of security controls across endpoints, servers, cloud workloads, identities, applications, and infrastructure.

Responsibilities:

Security Tool Coverage & Health

• Continuously measure deployment, communication, configuration, telemetry, version, policy assignment, and operational health of critical security controls.
• Identify endpoints, servers, cloud workloads, network devices, identities, applications, and other assets missing required security agents, integrations, sensors, or controls.
• Detect controls that are installed but unhealthy, stale, disconnected, disabled, outdated, misconfigured, or no longer producing expected telemetry.

Enterprise Security Control Hygiene

• EDR and endpoint detection and response agents, policies, sensors, and telemetry.
• PAM and privileged-access coverage, integrations, vaulting, connectors, and enforcement points.
• DLP agents, policies, integrations, and coverage across endpoints and supported data channels.
• SIEM log-source onboarding, ingestion continuity, parsing health, data freshness, and expected telemetry.
• Build and operate AI-assisted cyber hygiene capabilities that continuously evaluate security-control deployment and health across the enterprise.
• Use AI to reconcile asset inventories and telemetry across EDR, PAM, DLP, SIEM, endpoint security, vulnerability management, cloud security, and other required controls.
• Automatically identify assets where expected controls are missing, unhealthy, stale, disconnected, misconfigured, outdated, or not producing expected telemetry.
• Develop AI-assisted workflows that correlate evidence across security and infrastructure platforms, investigate anomalies, and determine the likely cause of control failures.
• Use AI to accelerate break/fix by identifying probable remediation actions, enriching incidents with asset and configuration context, and routing work to the appropriate engineering owner.
• Correlate data from security platforms, infrastructure and cloud inventories, Active Directory or Entra ID, endpoint-management systems, CMDB sources, and other authoritative repositories.
• Distinguish documented exclusions and lifecycle states from genuine security-control gaps.
• Identify orphaned assets, stale records, duplicate records, unmanaged systems, and unexpected assets surfaced through security telemetry.

Technical Automation & Observability

• Build Python, PowerShell, SQL, and API-based automation that continuously reconciles asset populations and security-control state.
• Develop dashboards and health views that show expected control coverage, actual coverage, current failures, aging, ownership, exceptions, and remediation status.
• Automate enrichment with asset owner, business service, environment, criticality, operating system, location, and lifecycle information.

Qualifications:

• 5+ years of hands-on security engineering, infrastructure security, endpoint security, vulnerability management, security operations, or closely related experience.
• Strong understanding of enterprise security controls and how agents, sensors, connectors, policies, integrations, and telemetry pipelines operate.
• Hands-on experience administering or troubleshooting several major technologies across EDR, PAM, DLP, SIEM, endpoint security, vulnerability management, cloud security, or related domains.
• Strong understanding of asset-management challenges across endpoints, servers, cloud workloads, network devices, identities, and applications.
• Experience diagnosing agent deployment, connectivity, version, certificate, policy, integration, configuration, and telemetry problems.
• Strong troubleshooting skills across Windows, Linux, cloud, networking, identity, endpoint management, and enterprise software-distribution environments.
• Experience working with REST APIs and extracting, normalizing, correlating, and reconciling data from enterprise platforms.
• Proficiency in Python, PowerShell, SQL, or equivalent automation and data-engineering technologies.
• Experience creating operational dashboards, security metrics, control-health indicators, and remediation workflows.
• Strong analytical mindset and willingness to investigate discrepancies until the underlying cause is understood and verified as resolved.

Required AI & Automation Experience:

• Practical experience using LLMs or AI-assisted technologies in security engineering, IT operations, reliability engineering, or a related technical function.
• Ability to determine when a problem requires deterministic automation, AI-assisted reasoning, or human investigation.
• Experience building API integrations, agentic workflows, prompt-based analysis, or lightweight remediation pipelines.
• Ability to provide structured asset, configuration, policy, telemetry, and ownership context to AI systems.
• Understanding of AI limitations, false conclusions, incomplete evidence, and the need to validate corrective actions.

Preferred Qualifications:

• Experience in banking, financial services, healthcare, or another regulated industry.
• Experience supporting regulatory, audit, or risk evidence for technical security controls.
• Experience with enterprise environments containing thousands of assets and multiple authoritative inventory sources.
• Experience building cross-platform asset reconciliation, control validation, or security-tool health processes.
• Experience integrating security-platform data into Splunk or an equivalent analytics platform.
• Experience with endpoint management, identity security, PAM, DLP, vulnerability management, cloud security, or data-security technologies.
• Relevant certifications in security engineering, cloud, endpoint management, identity, vulnerability management, or security operations.