Security Engineer With Active Directory Experience - Hybrid to NY

• Strong experience in Windows Server and Active Directory Administration.
• Hands-on experience implementing CIS Benchmarks for Windows, Linux, and endpoint systems.
• Expertise in Group Policy Objects (GPOs), security templates, and AD security best practices.
• Experience with endpoint security platforms such as Microsoft Defender for Endpoint, CrowdStrike, Sentinel One, Trellix, or Symantec Endpoint Security.
• Strong understanding of security controls including:
• Privileged Access Management (PAM)
• Multi-Factor Authentication (MFA)
• Endpoint Encryption
• Application Whitelisting
• Device Control
• Experience with one of the vulnerability management tools such as Tenable, Qualys, or Rapid7.
• Knowledge of security frameworks and standards including CIS, NIST, and ISO 27001.
• Scripting experience using PowerShell for automation and security policy deployment.

Preferred Qualifications

• Bachelor’s degree in computer science, Information Security, or related field.
• Security certifications such as:
• CISSP
• Security+
• Microsoft Security Certifications
• GIAC Certifications
• CIS Benchmark-related certifications
• Experience in enterprise-scale security operations and compliance environments.

Key Competencies

• Security Hardening & Compliance
• Active Directory Security
• Group Policy Administration
• Server and Database Security
• Vulnerability Management
• Incident Response Support
• Security Automation
• Risk Assessment & Remediation