Role: Security Engineer (Windows and Linux)
Location: Bellevue, WA
FTE
Job Description
Experience Level:
(OS Security & Baseline Operations)
7–12 years overall IT experience
3+ years in OS security / baseline operations
1–3 years in a technical lead or people‑management role
Core Technical Skills
Windows Security
Windows Server & Client security hardening (2016/2019/2022, Windows 10/11)
Group Policy (GPO) design, enforcement, and auditing
Windows security baselines (CIS, Microsoft Security Baselines)
Patch management and vulnerability remediation
Active Directory security (LDAP, Kerberos, NTLM, privileged access)
PowerShell scripting for security automation and compliance checks
Windows event logging, audit policies, and incident analysis
Linux Security: Security hardening for RHEL, Ubuntu, SUSE, CentOS. Linux security baselines (CIS, DISA STIGs). User/group management, sudo policies, PAM. SELinux/AppArmor configuration and troubleshooting. SSH hardening, key management, and access controls. Bash/Python scripting for automation and compliance. Log analysis (syslog, auditd)
Security & Compliance: OS baseline definition, validation, and continuous compliance monitoring. Vulnerability management (Qualys, Tenable, Defender, etc.). Secure configuration management and drift detection. Incident response support and root cause analysis.
Experience with regulatory/compliance frameworks: CIS, NIST, ISO 27001, SOX (nice to have). Security documentation, SOPs, and audit evidence preparation.
Tooling & Platforms (Preferred): Endpoint / OS security tools (Microsoft Defender, CrowdStrike, etc.). Configuration management (Ansible, SCCM, Intune, Puppet, Chef). Ticketing & workflow tools (ServiceNow, Azure DevOps, Jira). Cloud OS security exposure (Azure / AWS – IaaS VMs). Monitoring and SIEM tools (Splunk, Sentinel – nice to have)
Operational & Analytical Skills: Baseline exception management and risk assessment. OS build standards and golden image reviews. Troubleshooting complex OS‑level security issues.
Strong documentation and reporting skills: Metrics/KPIs for security posture and compliance health. People Management.