Security Engineer: Systems Hardening & Automation

Talentify; Duluth (GA); On-site; USD 110,000 - 140,000; Full time

Job summary

Talentify in the United States is seeking a Security Engineer to own secure configuration, hardening, and operation of its security control set across on-prem and cloud environments. You will ensure policy matches configurations and remediate drift.

You will lead hardening, monitor drift, enforce device control and encryption, and collaborate with IT and security teams to keep systems healthy and compliant.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent work experience.
• At least 3 years of experience in security engineering, systems engineering, or infrastructure operations with security responsibility.
• Demonstrated hands-on experience hardening Windows and Linux systems against recognized configuration baselines.
• Practical experience administering enterprise security tooling such as endpoint protection, email security, or access control platforms.
• Experience reconciling documented policy against live system configuration and closing the resulting differences.
• Experience working in hybrid environments with a mix of on-premises and cloud-based systems.
• Familiarity with industry frameworks (NIST, CIS, ISO 27001) and translating framework requirements into technical configuration.
• Demonstrated ability to balance robust security controls with positive user experience and business enablement.

Responsibilities

• Lead system and platform hardening across servers, endpoints, network devices, and cloud services using CIS Benchmarks and vendor security baselines.
• Validate that logical configuration aligns to documented security policy and technical standards, and remediate deviations.
• Identify, document, and remediate misconfigurations across infrastructure, identity, and security tooling.
• Implement and monitor configuration drift detection and drive corrective action where baselines have decayed.
• Enforce endpoint baseline hardening and device compliance policies through enterprise endpoint management tooling.
• Operationalize device control, application control, and disk encryption policies.
• Administer day-to-day operation, tuning, and lifecycle maintenance of enterprise security platforms, including endpoint protection, email security, and access control tooling.
• Maintain security tooling coverage and health, and resolve gaps in agent deployment or policy application.
• Support vulnerability remediation by implementing patches, configuration changes, and compensating controls in coordination with IT operations.
• Implement changes required to keep the environment aligned with evolving industry standards, vendor guidance, and control framework updates.
• Implement and maintain security controls for hybrid environments combining on-premises infrastructure and cloud-based systems.
• Use scripting and automation (PowerShell, KQL, Graph API) to reduce manual configuration work and enforce consistency.
• Maintain accurate technical documentation for configuration standards, operational procedures, and control implementation.
• Partner with systems, network, database, and application teams to implement security requirements without unnecessary disruption to operations.
• Provide technical evidence supporting internal and external audit, certification, and regulatory assessment activities.
• Participate in the incident response lifecycle as assigned, including containment, eradication, and recovery support.
• Balance security requirements with user experience needs to maintain productivity alongside a strong security posture.
• Occasional travel throughout the United States.

Skills

Security engineering

Configuration management

Documentation discipline

Hybrid infrastructure fundamentals

Scripting & automation

Network segmentation concepts

Audit evidence & regulatory assessment

Education

Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent work experience

Tools

Endpoint protection (EDR/XDR)

Email security

Access control tooling

Job description

Talentify in the United States is seeking a Security Engineer to own secure configuration, hardening, and operation of its security control set across on-prem and cloud environments. You will ensure policy matches configurations and remediate drift.

You will lead hardening, monitor drift, enforce device control and encryption, and collaborate with IT and security teams to keep systems healthy and compliant.