5-7 years of experience in cybersecurity architecture or related fields.
Hands-on experience with secure configuration standards and security hardening.
Expertise with CIS Benchmarks for compliance assessment and remediation.
Experience in automated security compliance validation and monitoring.
Knowledge of policy-as-code principles for security enforcement.
Strong understanding of configuration drift detection and exception management.
Proven ability to develop technical security standards and audit documentation.
Responsibilities
Lead the development of enterprise secure configuration standards aligned with CIS Benchmarks.
Design and enhance configuration management architecture for security consistency.
Implement automated compliance validation processes to identify security gaps.
Advance policy-as-code practices for scalable security enforcement.
Establish processes for detecting configuration drift and tracking remediation.
Collaborate with teams to integrate secure configuration into operational workflows.
Strengthen audit readiness through reliable compliance evidence and reporting.
Evaluate security tools for consolidation and improvement opportunities.
Benefits
Remote work opportunity within the United States.
Engagement as W2 employee only, no C2C/1099 options.
Involvement in a global cybersecurity transformation initiative.
Opportunity to work across various cybersecurity domains.
Potential for significant impact on enterprise security standards and practices.
Full Job Description
Job Description What's In Store For You
Remote opportunity - United States only, as specified in the latest requisition comments. The formal posting also lists hybrid, so the final work arrangement requires confirmation.
Engagement: W2 only (no C2C/1099).
Contribute to a global cybersecurity transformation initiative focused on enterprise configuration management and automated compliance.
Work across cybersecurity architecture, engineering, governance, risk management, and technology operations.
Help establish scalable security standards and automation capabilities across a complex international technology environment.
Participate in initiatives involving security tool consolidation, continuous compliance monitoring, and operational security improvements.
How You Will Make An Impact
Lead the development and implementation of enterprise secure configuration standards aligned with CIS Benchmarks and established cybersecurity frameworks.
Design and improve configuration management architecture to strengthen security consistency across endpoints and enterprise technology environments.
Develop and implement automated compliance validation processes that identify configuration deviations, security gaps, and policy violations.
Advance policy-as-code practices to improve the consistency, repeatability, and scalability of security configuration enforcement.
Establish processes for detecting configuration drift, evaluating exceptions, tracking remediation activities, and maintaining ongoing compliance.
Collaborate with security engineering and technology operations teams to integrate secure configuration requirements into existing operational workflows.
Strengthen audit readiness by developing reliable compliance evidence, control documentation, and reporting capabilities that support internal audit and regulatory expectations.
Evaluate existing security and configuration management tools, identify overlapping capabilities, and support technology rationalization initiatives.
Partner with cybersecurity, risk, compliance, procurement, finance, and technology stakeholders to align technical security improvements with enterprise governance requirements.
Drive initiatives from initial assessment and architectural recommendations through implementation, validation, documentation, and sustainable operational adoption.
Requirements Do You Bring Proven Success in Enterprise Security Configuration Management and Compliance Automation?
5-7 years of relevant experience in cybersecurity architecture, security engineering, configuration management, or related enterprise security disciplines.
Strong hands-on experience implementing secure configuration standards and security hardening practices across enterprise technology environments.
Demonstrated expertise with CIS Benchmarks, including assessing configuration compliance, identifying gaps, and implementing remediation strategies.
Experience designing or supporting automated security compliance validation and configuration monitoring capabilities.
Knowledge of policy-as-code principles and automated security control enforcement.
Strong understanding of configuration drift detection, exception management, security remediation, and ongoing control validation.
Ability to develop technical security standards, implementation guidance, and audit-supporting documentation.
Experience evaluating security tools and identifying opportunities to simplify, consolidate, or improve enterprise security capabilities.
Understanding of cybersecurity architecture principles and the integration of security controls into enterprise technology operations.
Strong analytical and problem-solving skills with the ability to translate security requirements into practical technical solutions.
Excellent communication and stakeholder management skills, particularly when coordinating across engineering, operations, security, and compliance teams.
Ability to independently manage technical initiatives, influence decisions, and drive measurable security improvements across geographically distributed teams.
