IT - Cybersecurity Engineer

edged.ai Ltd; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

edged.ai Ltd. is seeking a Cybersecurity Engineer to strengthen security across servers and networks, including Defender, Intune, Purview, and Entra ID deployments. The role involves deploying and tuning SIEM solutions such as Rapid7 and managing IAM/IGA and PAM solutions.

This position supports architecture reviews and the design of new secure solutions in a fast-paced environment. The ideal candidate has 7+ years in cybersecurity engineering, hands-on SIEM management, and scripting skills to

Qualifications

• 7+ years of Cybersecurity engineering experience with emphasis on Identity, Endpoint protection, and SIEM.
• Hands-on experience with server, Azure, and network hardening and management.
• Experience managing SIEMs (Rapid7, Arctic Wolf) and Defender/Intune security.
• Familiarity with Entra ID, Azure AD, SSO, SCIM, Conditional Access, and PAM.
• Knowledge of SOC 2, ISO 27001, PCI frameworks; bachelor’s degree preferred.

Responsibilities

• Design, implement, and optimize co-sourced SIEM solutions (e.g., Rapid7).
• Configure and troubleshoot log ingestion from Azure, M365, on-prem servers, and network devices.
• Lead cybersecurity projects including cloud security enhancements and PAM deployments.
• Review architectures and design secure, scalable, compliant solutions.
• Develop automation to enforce security baselines and tooling requirements.

Skills

Identity & Access Management

SIEM

Cloud security

Network hardening

Automation scripting

Azure

PowerShell

Python

Zero-trust

PAM implementations

Education

Bachelor's degree in Information Technology or Computer Science

Tools

Rapid7

Arctic Wolf

Intune

Azure

JIRA

Job description

Overview

The Cybersecurity Engineer is focused on hardening infrastructure across servers and networks, as well as Microsoft Defender, Intune, Purview, and Entra ID deployments. This role will involve deploying and tuning SIEM solutions such as Rapid7 and managing Identity Governance and Administration and Privileged Access Management solutions. This role will also be involved in the architecture review of existing solutions and may assist in the design of new solutions. This position is ideal for someone who thrives in a fast-paced, project-driven environment and can bring deep technical expertise to strengthen security, compliance, and resilience.

Overview

The Cybersecurity Engineer is focused on hardening infrastructure across servers and networks, as well as Microsoft Defender, Intune, Purview, and Entra ID deployments. This role will involve deploying and tuning SIEM solutions such as Rapid7 and managing Identity Governance and Administration and Privileged Access Management solutions. This role will also be involved in the architecture review of existing solutions and may assist in the design of new solutions. This position is ideal for someone who thrives in a fast-paced, project-driven environment and can bring deep technical expertise to strengthen security, compliance, and resilience.

The Cybersecurity Engineer needs to be an agile, team-focused individual, with proven professionalism, who is comfortable in a rapidly changing environment. The right person is trustworthy with confidential information, highly organized, self-motivated and self-documenting, has excellent communication skills, can think strategically, and works equally as well independently as with a team. Edged strives to maintain smooth operations and achieves this by empowering our people, by providing autonomy and flexibility in the way we work, by developing a habit of constant, open communication, and by creating a culture of excellence, appreciation, trust, and respect.

Key Responsibilities

Include But Are Not Limited To

Cybersecurity & Monitoring

• Design, implement, and optimize co-sourced SIEM solutions (e.g., Rapid7, Arctic Wolf, etc.).
• Configure and troubleshoot log ingestion from Azure, Microsoft 365, on-prem servers, and network devices.
• Support incident detection, response workflows, and forensic readiness.
• Define, implement and manage the Edged vulnerability management program
• Manage and refine use of tools in Microsoft 365 security, including Defender, Intune, Purview, and Entra ID.

IAM / IGA

• Support, troubleshoot, and guide a modern identity access management and identity governance program, based on Zero-trust principles.
• Engineer and support a rollout of PAM, ZTNA, SASE solution(s).

Infrastructure Hardening

• Assist, guide, and support IT in hardening Windows/Linux servers, network infrastructure, backups, hypervisor, and Azure environments according to security best practices.
• Propose network segmentation, firewall tuning, and secure configuration baselines.
• Implement and enforce compliance-aligned controls (SOC 2, ISO 27001, PCI).

Project Leadership

• Lead cybersecurity projects such as cloud security enhancements, PAM deployments, SIEM deployments, and disaster recovery implementations.
• Work cross-functionally with IT, operations, and physical security teams to align technical solutions with business requirements.

System Engineering

• Engineer, manage, and operate servers and applications hosting cybersecurity tooling and services.
• Develop scripts and automation to enforce security baselines and streamline configuration, and cybersecurity tooling requirements.
• Support secure integration of business applications into Edged infrastructure and identity control planes.

Architecture

• Review and assess existing infrastructure and security architectures, identifying areas for improvement.
• Contribute to the design of new systems and solutions, ensuring scalability, security, and compliance.
• Provide guidance on secure architectures for cloud, on-premises, and hybrid environments.

Skills & Requirements

Education / Experience

• 7+ years of Cybersecurity engineering experience with a strong focus on Identity, Endpoint protection, and SIEM.
• Demonstrated experience with server, Azure, and network hardening and management.
• Hands-on experience managing SIEM solutions (Rapid7, Arctic Wolf, or similar) and responding to security events as well as managing Microsoft Defender security.
• Proven experience with Identity Access Management and Identity Governance and Administrative programs, including familiarity with Entra ID, Azure, AD, SSO, SCIM, Conditional Access, and PAM implementations.
• Strong knowledge of compliance and security frameworks (SOC 2, ISO 27001, PCI).
• Bachelor’s degree in Information Technology, Computer Science, or related field preferred (or equivalent experience).
• Certifications (e.g., Security+, CISSP, AZ-500) are a plus but not required.
• Experience with JIRA and InTune is a plus.

Specific Skills / Abilities

• Proficiency in automation and scripting (PowerShell, Python, or Bash).
• Ability to design, review, and improve infrastructure and security architectures.
• Strong troubleshooting and problem-solving skills across complex IT environments.
• Ability to work independently and manage multiple priorities.
• Strong written and verbal communication skills, with the ability to collaborate across technical and non-technical teams.
• Self-starter with initiative and accountability for delivering results.
• Ability to self-document as solutions are engineered and decisions are made.
• Ability to communicate technical risks, solutions, and architectural recommendations to both technical and business stakeholders.
• Ability to travel up to 10% to data center locations and adapt to a dynamic work environment.
• Positive attitude with a proactive approach to addressing challenges.