Security Engineer: Harden Systems, Enforce Policy

Jobvite, Inc.; Atlanta (GA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

AGS is seeking a Security Engineer in Atlanta to own secure configuration, hardening, and operation of security controls across on-prem and cloud environments. You will ensure policy aligns with configuration and drive drift remediation.

You will collaborate with Infrastructure, Network, Enterprise Apps, and Business Systems teams; leverage PowerShell, KQL, and Graph API to automate and enforce standards while supporting audits and incident response.

Qualifications

• Bachelor's degree required or equivalent work experience.
• ≥3 years of security engineering or related operations with security responsibility.
• Hands-on experience hardening Windows and Linux to baselines.
• Experience administering security tooling such as endpoint protection or email security.
• Hybrid on-prem and cloud environment experience.
• Familiarity with NIST, CIS, ISO 27001 frameworks and mapping to configuration.
• Certifications such as CompTIA Security+, CySA+, SSCP, GSEC preferred.

Responsibilities

• Lead system and platform hardening across servers, endpoints, network devices, and cloud services using CIS Benchmarks and vendor baselines.
• Validate that configuration aligns to security policy and standards; remediate deviations.
• Identify, document, and remediate misconfigurations across infrastructure, identity, and tooling.
• Implement and monitor configuration drift detection and enforce baselines.
• Administer enterprise security platforms, including endpoint protection, email security, and access control tooling.
• Support vulnerability remediation with patches, config changes, and compensating controls.
• Provide evidence for internal and external audits and regulatory assessments.
• Participate in incident response lifecycle as assigned.
• Balance security needs with user experience to maintain productivity.
• Occasional travel throughout the United States.

Skills

CIS Benchmarks

DISA STIGs

Endpoint management

EDR/XDR

PowerShell

Graph API

Cloud security

Hybrid infrastructure

Documentation

Network segmentation

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Endpoint protection

Email security

Access control tooling

Job description

AGS is seeking a Security Engineer in Atlanta to own secure configuration, hardening, and operation of security controls across on-prem and cloud environments. You will ensure policy aligns with configuration and drive drift remediation.

You will collaborate with Infrastructure, Network, Enterprise Apps, and Business Systems teams; leverage PowerShell, KQL, and Graph API to automate and enforce standards while supporting audits and incident response.