Cybersecurity Contractor: 6-9 years (Advanced)

Conduct and coordinate security reviews for applications, vendors, and cloud services, including risk assessments, security architecture reviews, and application security assessments. •Participate in security activities throughout project phases (init iation, planning, design, implementation, operation), ensuring security and compliance requirements are met.

Cyber Security Engineer
Remote

Only on W2
No C2C

USC/ GC/ TN-Visa Only

•Participate in security activities throughout project phases (init

iation, planning, design, implementation, operation), ensuring security and compliance requirements are met.
• Conduct and coordinate security reviews for applications, vendors, and cloud services, including risk assessments, security architecture reviews, and application security assessments.
• Manage and operationalize vulnerability scanning, patch management, and remediation activities.
• Integrate and support security logging, monitoring, incident response, and threat management.
• Assist in identity and access management (IAM), privileged account management
• Provide security consulting to project teams, vendors, and stakeholders on design, architecture, and implementation best practices.
• Document security requirements, review findings, and compliance evidence for projects and vendors.
• Support cloud security policies and processes, including EIP approval and onboarding of new cloud/SaaS applications.
• Collaborate with teams to ensure effective implementation and validation of security controls.
Technical Knowledge & Tool Experience Required:
• Azure (including security, compliance, and integration aspects)
• Entra ID & MS Intune (Endpoint management, device security)
• Microsoft 365 Suite (Security, compliance, and CAPs)
• Microsoft Defender for Endpoint
• CrowdStrike (Endpoint protection and threat detection)
• Vulnerability Scanning & Patch Management Tools
• Zscaler (ZIA, ZPA, Web DLP)
• Proofpoint (email security, threat protection)
• FWs IPS/IDS & WAF
• IAM (Okta, Entra)
• DDoS and Bot Protection
• Application Security (Secure coding, application risk assessment)
• Security Monitoring Tools / SIEM (Splunk)
• Cybersecurity Frameworks: HIPAA, NIST, HITRUST
• Experience with SIEM tools, alerting, and log analysis (Splunk preferred).
• Strong understanding of data loss prevention solutions, configurations, implementation, and support (Purview and ZScaler preferred)