Cybersecurity Remediation Engineer

What you'll do

• Lead technical remediation efforts for identity infrastructure, Active Directory, and privileged access systems.
• Assess Active Directory environments for security weaknesses and implement hardening aligned with industry best practices.
• Support incident containment, root cause analysis, and the deployment of technical fixes to reduce enterprise risk.
• Partner with engineering and product teams to implement remediation plans and improve security postures.
• Drive the implementation of secure configurations across cloud platforms, operating systems, and network domains.
• Develop automation and tooling to accelerate configuration management and vulnerability reduction at scale.
• Create technical documentation outlining remediation guidance and security best practices for stakeholders.

What we're looking for

• 8+ years of experience in Active Directory, identity engineering, infrastructure security, or related enterprise engineering disciplines.
• Demonstrated experience deploying, configuring, administering, and securing Microsoft Active Directory in enterprise environments.
• Strong understanding of Active Directory architecture including forests, domains, trusts, replication, DNS integration, and identity lifecycle management.
• Experience developing, testing, and executing Active Directory recovery plans for operational failures, security incidents, or ransomware events.
• Strong understanding of identity-based attack techniques including Kerberoasting, Pass-the-Hash, Golden Ticket, Silver Ticket, and DCSync.
• Ability to communicate technical remediation steps to non-technical stakeholders and collaborate across engineering and security teams.
• Experience securing hybrid identity environments integrating Microsoft Active Directory and Microsoft Entra ID (preferred).
• Bachelor's Degree.