{"id":3971813,"url":"https://alion.io/job/brmi-cyber-security-engineer","title":"Cyber Security Engineer","company":{"id":4422694,"name":"BRMi","domain":"brmi.com","url":"https://alion.io/company/brmi-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Defense in Depth","optional":false},{"name":"GitHub","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"PowerShell","optional":false},{"name":"Red Hat","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-09T16:28:18Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T21:53:34Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nWe are seeking an experienced Cybersecurity Engineer to support enterprise application whitelisting, application control, and daily endpoint security operations. This role focuses on designing, implementing, maintaining, and troubleshooting application control policies while ensuring endpoint protection, security compliance, and operational stability across enterprise environments.\nThe Cybersecurity Engineer will work extensively with Microsoft Defender for Endpoint, Defender Antivirus, Microsoft WDAC/App Control for Business, AppLocker, and other enterprise application control technologies. The position will also support the evaluation and testing of emerging security solutions, including ThreatLocker and Airlock Digital.\nThe ideal candidate will have strong hands-on experience with endpoint security technologies, application control policy management, security investigations, and troubleshooting across Windows, macOS, and Linux environments. This role requires strong analytical skills, automation experience, and the ability to collaborate with application owners, infrastructure teams, and cybersecurity stakeholders to implement effective security controls while minimizing operational disruption.\nBenefits:\nComprehensive Medical, Dental, and Vision Insurance\nEmployer-Paid Life Insurance\nEmployer-Paid Short-Term and Long-Term Disability Insurance\n401(k)\nPaid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays\nEducational Assistance\nSalary: 120k-159k\n**Can be 100% remote in TX, VA, MD, DC, or FL**\n**High Profile roles may require candidates to fly to customer HQ for in person interview (expenses paid)**\nClick here to learn about BRMi's culture.\nClick here to see BRMi’s Glassdoor reviews\nResponsibilities\nDesign, implement, maintain, tune, and troubleshoot enterprise application whitelisting and application control policies.\n\nAdminister and support application control technologies, including Microsoft WDAC/App Control for Business, AppLocker, and comparable enterprise platforms.\n\nSupport proof-of-concept evaluations and testing of application control solutions such as ThreatLocker and Airlock Digital.\n\nInvestigate and resolve application execution blocks using endpoint telemetry, Windows event logs, application control events, and diagnostic tools.\n\nAdminister and support Microsoft Defender for Endpoint and Defender Antivirus across enterprise environments.\n\nMonitor endpoint health, security compliance, protection status, and policy enforcement.\n\nInvestigate and remediate endpoint security alerts, malware detections, sensor issues, telemetry gaps, and protection-status discrepancies.\n\nTroubleshoot Defender Antivirus and EDR issues involving performance, policy conflicts, exclusions, scanning behavior, and endpoint configuration.\n\nConfigure, maintain, and troubleshoot endpoint security capabilities, including attack surface reduction, Controlled Folder Access, tamper protection, and automated investigation and remediation.\n\nUtilize Kusto Query Language (KQL) and Microsoft Defender Advanced Hunting to investigate endpoint activity, analyze security events, and validate security controls.\n\nManage endpoint security policy deployment, targeting, testing, validation, and troubleshooting through Microsoft Intune and MECM/SCCM.\n\nSupport endpoint security operations across Windows, macOS, and Linux systems, including Red Hat Enterprise Linux (RHEL).\n\nEvaluate application trust requirements involving code signing, certificates, trusted publishers, file hashes, and application paths.\n\nMaintain application control policies, scripts, documentation, and configuration history using GitHub or comparable source-control platforms.\n\nDevelop and maintain PowerShell, Ansible, and other automation scripts to improve endpoint security operations and policy management.\n\nSupport application control and endpoint security across workstations, servers, and virtual desktop infrastructure (VDI) environments.\n\nAnalyze endpoint telemetry and security events to distinguish malicious or suspicious activity from legitimate application and system behavior.\n\nPerform application control policy testing and validation to identify potential compatibility issues and operational impacts.\n\nSupport phased security policy deployments, production rollout readiness, and rollback planning.\n\nDocument testing outcomes, including expected results, actual results, identified issues, and recommended corrective actions.\n\nCollaborate with application owners, platform engineering, infrastructure, and cybersecurity teams to investigate security issues and develop practical remediation solutions.\n\nDevelop and maintain operational runbooks, troubleshooting procedures, root-cause analysis documentation, change records, and audit evidence.\n\nSupport continuous improvement of endpoint security controls, operational processes, and application control standards.\n\nPerform other duties as assigned.\n\nQualifications\nDemonstrated experience in cybersecurity engineering, endpoint security administration, or a related information security discipline.\n\nStrong hands-on experience with enterprise application whitelisting and application control technologies.\n\nExperience implementing, configuring, and troubleshooting Microsoft WDAC/App Control for Business, AppLocker, or comparable application control platforms.\n\nStrong experience administering and troubleshooting Microsoft Defender for Endpoint and Defender Antivirus.\n\nExperience investigating endpoint security alerts, malware detections, endpoint health issues, and security policy enforcement failures.\n\nExperience troubleshooting endpoint detection and response (EDR) technologies, including sensor health, telemetry, exclusions, scanning behavior, and performance-related issues.\n\nWorking knowledge of Microsoft Defender security capabilities, including attack surface reduction, Controlled Folder Access, tamper protection, and automated investigation and remediation.\n\nExperience using Kusto Query Language (KQL) and Microsoft Defender Advanced Hunting for security investigations, troubleshooting, compliance analysis, and threat hunting.\n\nExperience managing and deploying endpoint security policies through Microsoft Intune and MECM/SCCM.\n\nWorking knowledge of Windows, macOS, and Linux operating systems, including Red Hat Enterprise Linux (RHEL).\n\nUnderstanding of application trust models, code signing, digital certificates, trusted publishers, file hashes, and path-based application control rules.\n\nExperience analyzing Windows event logs, application control events, and endpoint telemetry to identify and resolve security issues.\n\nExperience supporting endpoint security across workstations, servers, and virtual desktop infrastructure environments.\n\nStrong understanding of cybersecurity principles, including malware prevention, vulnerability management, least privilege, defense-in-depth, threat detection, and security control validation.\n\nExperience testing, validating, and troubleshooting security policies before enterprise deployment.\n\nAbility to support phased deployments, assess operational impacts, and develop rollback procedures.\n\nExperience using GitHub or similar source-control platforms to manage scripts, security policies, documentation, and configuration changes.\n\nStrong analytical, troubleshooting, critical-thinking, and root-cause analysis skills.\n\nAbility to distinguish legitimate application behavior from suspicious or malicious endpoint activity.\n\nExperience developing technical documentation, operational runbooks, troubleshooting guides, and change management records.\n\nStrong written and verbal communication skills.\n\nAbility to collaborate effectively with application owners, infrastructure teams, platform engineers, and cybersecurity stakeholders.\n\nExperience with ThreatLocker or Airlock Digital application control technologies highly preferred.\n\nExperience developing automation solutions using PowerShell, Ansible, or comparable scripting technologies preferred.\n\nExperience supporting application control proof-of-concept initiatives, enterprise security deployments, or endpoint security modernization efforts preferred.\n\n** BRMi will not sponsor applicants for work visas for this position.**\n**This is a W2 opportunity only**\nEOE/Minorities/Females/Vet/Disabled\nWe are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.","description_format":"text","description_chars":8995,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Endpoint Security","Software Testing & QA","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-09T16:28:18Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:4","win:early"],"computed_at":"2026-11-10T01:56:49Z"},"pay":null,"html_url":"https://alion.io/job/brmi-cyber-security-engineer","json_url":"https://alion.io/job/brmi-cyber-security-engineer.json","meta":{"generated_at":"2026-11-10T01:56:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4537,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422694},"rest":"https://alion.io/mcp/rest/get_company?id=4422694"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrmi-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrmi-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrmi-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brmi-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrmi-cyber-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3971813}},{"tool":"search_jobs","arguments":{"company":"brmi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3971813},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}