Cybersecurity Engineer - WORK FROM HOME - US Only Select States

Summary

Slavic401k is a retirement savings and investment company focused on safeguarding and investing customers’ savings. The Cybersecurity Engineer will manage Azure vulnerability and patch processes, maintain secure configurations across cloud servers and endpoints, coordinate remediation with IT and DevOps, and provide basic security operations support.

Responsibilities

• Own the vulnerability and patch management process in Azure for VMs, PaaS workloads, and core services
• Use tools such as Defender for Cloud / Azure Security Center, Azure Update Management, Intune, and vulnerability scanners (e.g., Tenable Nessus) to: Identify and validate vulnerabilities and missing patches; Classify and prioritize findings (critical/high/medium); Coordinate and track remediation to closure
• Work with infrastructure/DevOps teams to define standard patching windows, maintenance plans, and rollback procedures
• Monitor Azure security posture dashboards and ensure patch and configuration baselines are maintained
• Support patching and configuration hardening for cloud servers and endpoints, leveraging existing IT tools (e.g., SCCM, Intune, or equivalent)
• Align on prem patching cadence with Azure patching to reduce overall risk and avoid drift
• Validate successful deployment of patches and address failed/exception hosts with IT
• Work closely with IT and DevOps to plan patch windows, test changes, and minimize business disruption
• Maintain clear documentation of vulnerability backlogs, exceptions, approvals, and remediation status
• Produce simple, understandable reports for management on: Outstanding critical/high vulnerabilities; Patch compliance by system group/environment; Trends over time (improvement vs. backlog growth)
• Contribute to and improve standard operating procedures for vulnerability and patch management
• Assist with triage of basic security tickets and alerts related to vulnerabilities, misconfigurations, or outdated software
• Participate in an on call rotation for critical patching issues or security incidents related to your scope
• Support incident response by quickly assessing patch/vulnerability exposure when needed

Skills

• While this position is WORK FROM HOME, we are only registered and can proceed with qualified candidates who reside and will work in one of the following US states: AL, AZ, FL, GA, MI, MS, NE, NC, OH, OK, TN, TX.****No exceptions.  No relocation assistance is available.**
• **Must be eligible to work in the US without employment sponsorship.**
• **Work Schedule:**Remote, core working hours between 9am-3pm EST, but occasional after-hours support as needed
• • Bachelor's degree in Computer Science, Information Security, or related field; or equivalent hands on experience
• • Experience in a security, systems, or cloud engineering role with ideally direct responsibility for patching and/or vulnerability remediation
• • Exposure to or demonstrated hands on experience with Microsoft Azure in one or more of the following: 
• O Azure VMs and Azure Update Management
• O Defender for Cloud / Azure Security Center
• O Intune or similar for endpoint management
• • Practical experience with at least one vulnerability scanning tool (e.g., Tenable Nessus, Qualys, Rapid7) and interpreting/prioritizing results
• • Strong understanding of:
• O Operating system patching (Windows Server; Linux a plus)
• O Basic configuration hardening concepts (CIS benchmarks, least privilege, etc.)
• • Ability to work through patching conflicts, testing, and exceptions with IT and application owners
• • Clear, concise communication skills
• • Remote work within one of the eligible states listed above
• • Core working hours between 9:00 a.m. and 3:00 p.m. ET, with flexibility around those hours
• • Participation in an on call rotation for critical patching or security issues
• O For all virtual remote positions, in order to ensure associates can effectively perform their job duties with no distractions, we require an uninterrupted virtual workspace
• O Additionally, there is an internet work speed requirement of 100 MBps or better. If you are unsure of your internet speed, please check with your service provider. Please ensure that you are able to meet these expectations before applying as adequate home work environment and the required internet connection is a non-negotiable requirement of remote employment
• • Experience in a cloud first or hybrid environment with a significant Azure footprint
• • Prior work in a vulnerability management or patch management–focused role
• • Familiarity with:
• O Defender for Cloud, Azure Security Center, Azure Policy
• O Intune, SCCM, or similar endpoint management tools
• O NIST / CIS Controls as they relate to patching and configuration management
• • Scripting/automation experience (e.g., PowerShell, Azure CLI, Python) to streamline patching and reporting
• • Exposure to SIEM tools (e.g., Microsoft Sentinel, Splunk) sufficient to pull data for reporting or basic investigations (not a core requirement)
• • Azure Security & Management: Defender for Cloud / Azure Security Center, Azure Update Management, Azure Policy, Intune
• • Vulnerability Management: Tenable Nessus or equivalent
• • Endpoint / Server Management: Intune, SCCM, or similar tools
• • Automation & Scripting: PowerShell, Azure CLI, basic Python (nice to have)

Qualifications

Must Haves

• While this position is WORK FROM HOME, we are only registered and can proceed with qualified candidates who reside and will work in one of the following US states: AL, AZ, FL, GA, MI, MS, NE, NC, OH, OK, TN, TX.****No exceptions.  No relocation assistance is available.**
• **Must be eligible to work in the US without employment sponsorship.**
• **Work Schedule:**Remote, core working hours between 9am-3pm EST, but occasional after-hours support as needed
• • Bachelor's degree in Computer Science, Information Security, or related field; or equivalent hands on experience
• • Experience in a security, systems, or cloud engineering role with ideally direct responsibility for patching and/or vulnerability remediation
• • Exposure to or demonstrated hands on experience with Microsoft Azure in one or more of the following: 
• o Azure VMs and Azure Update Management
• o Defender for Cloud / Azure Security Center
• o Intune or similar for endpoint management
• • Practical experience with at least one vulnerability scanning tool (e.g., Tenable Nessus, Qualys, Rapid7) and interpreting/prioritizing results
• • Strong understanding of:
• o Operating system patching (Windows Server; Linux a plus)
• o Basic configuration hardening concepts (CIS benchmarks, least privilege, etc.)
• • Ability to work through patching conflicts, testing, and exceptions with IT and application owners
• • Clear, concise communication skills
• • Remote work within one of the eligible states listed above
• • Core working hours between 9:00 a.m. and 3:00 p.m. ET, with flexibility around those hours
• • Participation in an on call rotation for critical patching or security issues
• o For all virtual remote positions, in order to ensure associates can effectively perform their job duties with no distractions, we require an uninterrupted virtual workspace
• o Additionally, there is an internet work speed requirement of 100 MBps or better. If you are unsure of your internet speed, please check with your service provider. Please ensure that you are able to meet these expectations before applying as adequate home work environment and the required internet connection is a non-negotiable requirement of remote employment

Nice to Haves

• • Experience in a cloud first or hybrid environment with a significant Azure footprint
• • Prior work in a vulnerability management or patch management–focused role
• • Familiarity with:
• o Defender for Cloud, Azure Security Center, Azure Policy
• o Intune, SCCM, or similar endpoint management tools
• o NIST / CIS Controls as they relate to patching and configuration management
• • Scripting/automation experience (e.g., PowerShell, Azure CLI, Python) to streamline patching and reporting
• • Exposure to SIEM tools (e.g., Microsoft Sentinel, Splunk) sufficient to pull data for reporting or basic investigations (not a core requirement)
• • Azure Security & Management: Defender for Cloud / Azure Security Center, Azure Update Management, Azure Policy, Intune
• • Vulnerability Management: Tenable Nessus or equivalent
• • Endpoint / Server Management: Intune, SCCM, or similar tools
• • Automation & Scripting: PowerShell, Azure CLI, basic Python (nice to have)

Benefits

• Remote work within one of the eligible states listed above.
• Flexible work environment
• Participation in Personal Annual Performance Bonus incentive program
• Medical, Dental, Vision, and Life Insurance
• 75% employer coverage of Medical Premiums
• Retirement Savings – 401(k) plan with generous company match, vested after 2 years
• Tuition Reimbursement up to $5,250/year
• Generous Paid Time Off upon hire – plus quarterly Work/Life Balance days and paid holidays
• Paid Parental Leave
• Voluntary Pet Insurance, Lifelock and More!
• 24/7 no-cost Employee Assistance Program (EAP)