Security Engineer - Cloud & Endpoint Hardening

AGS LLC; Duluth (GA); On-site; USD 110,000 - 140,000; Full time

Job summary

AGS LLC is seeking a Security Engineer to own secure configuration, hardening, and ongoing operation of the AGS security control set across on-prem and cloud environments. This role ensures policy and standards match configurations, identifies drift, and keeps platforms aligned to evolving baselines.

You will lead hardening across servers, endpoints, network devices, and cloud services, implement drift detection, manage endpoint protection, email security, and access controls, and collaborate

Qualifications

• Bachelor's degree in a relevant field or equivalent work experience.
• Hands-on experience hardening Windows and Linux to baseline security configurations.
• Experience administering enterprise security tooling (EDR/XDR, email security, access controls).

Responsibilities

• Lead system and platform hardening across servers, endpoints, network devices, and cloud services using CIS and vendor baselines.
• Validate configuration against security policy and remediate deviations.
• Identify and remediate misconfigurations across infrastructure and security tooling.
• Implement and monitor configuration drift detection and drive corrective actions.
• Maintain security tooling health and coverage, including agent deployment and policy application.
• Support vulnerability remediation with patches and compensating controls.
• Collaborate with IT and security partners to implement security requirements with minimal disruption.
• Prepare technical evidence for audits, certifications, and regulatory assessments.

Skills

CIS Benchmarks

DISA STIGs

Windows hardening

Linux hardening

PowerShell scripting

KQL

Graph API

Cloud security

Documentation

Hybrid infrastructure

NIST / CIS / ISO 27001

Education

Bachelor's degree in Computer Science / Information Security / IT

Tools

EDR/XDR

MDM/MAM tooling

Endpoint protection

Email security

Access control tooling

Patching tooling

Job description

AGS LLC is seeking a Security Engineer to own secure configuration, hardening, and ongoing operation of the AGS security control set across on-prem and cloud environments. This role ensures policy and standards match configurations, identifies drift, and keeps platforms aligned to evolving baselines.

You will lead hardening across servers, endpoints, network devices, and cloud services, implement drift detection, manage endpoint protection, email security, and access controls, and collaborate