Security Engineer

Tata Consultancy Services; Bellevue (WA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Support Benefits

Legal & Financial Assistance

Time Off Benefits

Job summary

A global technology consulting firm located in Bellevue, WA, is seeking an OS Security Specialist with over 3 years in OS security and experience in team leadership. The role involves Windows and Linux security hardening, compliance monitoring, and incident response. Candidates should have a background in regulatory frameworks like CIS and NIST. The position offers comprehensive benefits, including medical coverage and professional development support.

Qualifications

• 3+ years in OS security / baseline operations
• 1–3 years in a technical lead or people-management role
• Experience with regulatory/compliance frameworks like CIS, NIST, ISO 27001.

Responsibilities

• Perform Windows and Linux security hardening.
• Manage OS baseline definition and compliance monitoring.
• Respond to incidents and conduct root cause analysis.

Skills

Windows Security

Linux Security

Security & Compliance

Operational & Analytical Skills

Strong documentation and reporting skills

Tools

Ansible

SCCM

ServiceNow

Splunk

Job description

3+ years in OS security / baseline operations

1–3 years in a technical lead or people‑management role

Core Technical Skills

Windows Security

• Windows Server & Client security hardening (2016/2019/2022, Windows 10/11)
• Group Policy (GPO) design, enforcement, and auditing
• Windows security baselines (CIS, Microsoft Security Baselines)
• Patch management and vulnerability remediation
• Active Directory security (LDAP, Kerberos, NTLM, privileged access)
• PowerShell scripting for security automation and compliance checks
• Windows event logging, audit policies, and incident analysis

Linux Security

• Security hardening for RHEL, Ubuntu, SUSE, CentOS
• Linux security baselines (CIS, DISA STIGs)
• User/group management, sudo policies, PAM
• SELinux/AppArmor configuration and troubleshooting
• SSH hardening, key management, and access controls
• Bash/Python scripting for automation and compliance
• Log analysis (syslog, auditd)

Security & Compliance

• OS baseline definition, validation, and continuous compliance monitoring
• Vulnerability management (Qualys, Tenable, Defender, etc.)
• Secure configuration management and drift detection
• Incident response support and root cause analysis

Experience with regulatory/compliance frameworks

• CIS, NIST, ISO 27001, SOX (nice to have)
• Security documentation, SOPs, and audit evidence preparation

Tooling & Platforms (Preferred)

• Endpoint / OS security tools (Microsoft Defender, CrowdStrike, etc.)
• Configuration management (Ansible, SCCM, Intune, Puppet, Chef)
• Ticketing & workflow tools (ServiceNow, Azure DevOps, Jira)
• Cloud OS security exposure (Azure / AWS – IaaS VMs)
• Monitoring and SIEM tools (Splunk, Sentinel – nice to have)

Operational & Analytical Skills

• Baseline exception management and risk assessment
• OS build standards and golden image reviews
• Troubleshooting complex OS‑level security issues.

Strong documentation and reporting skills

• Metrics/KPIs for security posture and compliance health
• People Management

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.