Cybersecurity Infrastructure Engineer

What you'll do

• Lead infrastructure recovery and identity containment workstreams for enterprise on-premises and cloud environments.
• Set technical priorities and evidence requirements for identity, directory, and privileged access workstreams.
• Lead containment and recovery for compromised Active Directory, Entra ID, and hybrid infrastructure.
• Assess compromise scope, trust relationships, and security-control gaps to identify validation needs.
• Collect and analyze infrastructure and identity evidence to support investigation and recovery decisions.
• Brief customer technical teams and executives on findings, priorities, and decision options.
• Maintain technical documentation and follow-the-sun handovers covering evidence, risks, and next actions.
• Contribute to proactive services like compromise assessments and infrastructure resilience improvements.

What we're looking for

• Doctorate in a relevant field and 3+ years of experience in software development, cybersecurity, or threat analysis.
• Master's Degree in a relevant field and 3+ years of experience in software development, cybersecurity, or threat analysis.
• Bachelor's Degree in a relevant field and 4+ years of experience in software development, cybersecurity, or threat analysis.
• Equivalent experience to the educational and experience requirements.
• Ability to meet Microsoft Cloud Background Check and other government security screening requirements.
• Ability to work non-standard business hours, including Friday through Monday, 10-hour shifts, weekends, and public holidays.
• Demonstrated hands-on experience with Active Directory, Entra ID, or other enterprise identity platforms (preferred).
• Experience in cybersecurity incident response, digital forensics, threat hunting, or enterprise recovery (preferred).