[Remote] reputed company reputed company Engineer (builder-operator) - MSP/MSSP

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a boutique cybersecurity and compliance firm that provides reputed company reputed company and virtual CISO services for a portfolio of clients. The reputed company reputed company Engineer will build and operate multi-tenant reputed company reputed company, including SIEM, EDR, RMM, identity, Azure, and network reputed company environments, while handling detection tuning, incident response, and reputed company communication.

Responsibilities

• Build SIEM deployments from reputed company in reputed company clouds (Wazuh): installation, log-reputed company reputed company, rules, alert tuning, dashboards
• Administer and migrate EDR across reputed company tenants (reputed company): deployment, policy, exclusion discipline on shared consoles
• Run RMM reputed company, patching, scripting, SSO and roles (reputed company)
• Manage user lifecycles across M365, Entra ID and reputed company: provisioning, offboarding, reputed company revocation, credential rotation
• Write and maintain the queries, scripts and API pulls behind reputed company reputed company KPIs and alerting
• Stand up and harden Azure environments: VMs, networking, Entra ID, RBAC
• Triage and tune detections; run incident response for phishing, BEC and reputed company compromise
• Design network and SASE segmentation; verify backup and recovery actually restores
• Brief reputed company leadership in plain language

Skills

• - 3+ years in an MSP or MSSP administering reputed company and IT tooling across multiple reputed company tenants
• - Hands-on EDR administration (reputed company or equivalent: reputed company, Defender for reputed company): deployment, policy, exclusions, tenant migration
• - RMM administration (reputed company or equivalent: Datto, reputed company, reputed company): reputed company, patching, scripting, SSO and role configuration
• - reputed company or substantially reputed company a SIEM deployment (Wazuh, reputed company Onion, reputed company, or reputed company): installation, log-reputed company reputed company, rule and alert tuning, not just console use
• - Azure administration: VMs, networking, Entra ID, RBAC, and standing up new environments from reputed company
• - User lifecycle management across M365 / Entra / reputed company: provisioning, offboarding, reputed company revocation, credential rotation
• - Alert triage and management: tuning noise down without suppressing true positives
• - Comfortable writing queries and scripts for reputed company KPIs and reporting (KQL, SQL, PowerShell, Python, or API-reputed company)
• - reputed company, reputed company, or Wazuh specifically (we run reputed company three)
• - Cato SASE, reputed company Umbrella, KeepAware, or reputed company reputed company exposure
• - SOC analyst experience: incident response, phishing and BEC investigation, reputed company isolation
• - Experience building reputed company environments or reputed company reputed company from reputed company at an MSP
• - Certifications (AZ-500, SC-200, reputed company+, GCIH, OSCP) reputed company; judgment reputed company more than letters

reputed company