{"schemaVersion":"jobsearcher.job.v1","id":"9285e5f5a67178239c705def","url":"https://jobsearcher.com/jobs/9285e5f5a67178239c705def","canonicalUrl":"https://jobsearcher.com/jobs/9285e5f5a67178239c705def","title":"Security Engineer","description":"Job Overview\n\nThe Security Engineer is responsible for the secure configuration, hardening, and ongoing operation of the AGS security control set and the systems those controls protect. The role ensures that documented security policy and technical standards match what is actually configured in the environment, identifies and remediates configuration drift and misconfiguration, and keeps the technical estate aligned to current industry baselines as they evolve. This is a hands-on engineering role focused on sustained operational quality, taking ownership of the platforms and standards the security team implements and keeping them healthy, current, and effective over time. The role receives technical direction from the Senior Security Engineer and partners closely with Infrastructure, Network, Enterprise Apps, and Business Systems teams.\n\nResponsibilities\n\nLead system and platform hardening across servers, endpoints, network devices, and cloud services using recognized configuration baselines such as CIS Benchmarks and vendor security baselines.\nValidate that logical configuration across the environment aligns to documented security policy and technical standards, and remediate deviations.\nIdentify, document, and remediate misconfigurations across infrastructure, identity, and security tooling.\nImplement and monitor configuration drift detection and drive corrective action where baselines have decayed.\nEnforce endpoint baseline hardening and device compliance policies through enterprise endpoint management tooling.\nOperationalize device control, application control, and disk encryption policies.\nAdminister day-to-day operation, tuning, and lifecycle maintenance of enterprise security platforms, including endpoint protection, email security, and access control tooling.\nMaintain security tooling coverage and health, and resolve gaps in agent deployment or policy application.\nSupport vulnerability remediation by implementing patches, configuration changes, and compensating controls in coordination with IT operations.\nImplement changes required to keep the environment aligned with evolving industry standards, vendor guidance, and control framework updates.\nImplement and maintain security controls for hybrid environments combining on-premises infrastructure and cloud-based systems.\nUse scripting and automation (PowerShell, KQL, Graph API) to reduce manual configuration work and enforce consistency.\nMaintain accurate technical documentation for configuration standards, operational procedures, and control implementation.\nPartner with systems, network, database, and application teams to implement security requirements without unnecessary disruption to operations.\nProvide technical evidence supporting internal and external audit, certification, and regulatory assessment activities.\nParticipate in the incident response lifecycle as assigned, including containment, eradication, and recovery support.\nBalance security requirements with user experience needs to maintain productivity alongside a strong security posture.\nOccasional travel throughout the United States.\n\nQualifications\n\nSecure configuration and hardening: CIS Benchmarks, DISA STIGs, or vendor security baselines across Windows and Linux systems.\nEndpoint management and compliance: MDM/MAM tooling, compliance policies, security baselines, device and application control.\nEnterprise security platform administration: endpoint protection (EDR/XDR), email security, access control tooling.\nConfiguration drift detection and remediation, and reconciling documented policy against live configuration.\nPatch and vulnerability remediation execution, including compensating control design.\nHybrid infrastructure fundamentals: virtualization, enterprise directory services, and cloud service configuration.\nScripting and automation (PowerShell, KQL, Graph API); configuration management or infrastructure-as-code preferred.\nWorking understanding of network segmentation and access control concepts.\nStrong documentation discipline and attention to detail.\n\nSkills/Requirements\n\nBachelor's Degree in Computer Science, Information Security, Information Technology, or equivalent work experience.\nAt least 3 years of experience in security engineering, systems engineering, or infrastructure operations with meaningful security responsibility.\nDemonstrated hands-on experience hardening Windows and Linux systems against recognized configuration baselines.\nPractical experience administering enterprise security tooling such as endpoint protection, email security, or access control platforms.\nExperience reconciling documented policy against live system configuration and closing the resulting differences.\nExperience working in hybrid environments with a mix of on-premises and cloud-based systems.\nFamiliarity with industry frameworks (NIST, CIS, ISO 27001) and how framework requirements translate into technical configuration.\nDemonstrated ability to balance robust security controls with positive user experience and business enablement.\nRelevant technical certifications required or strongly preferred: CompTIA Security+, CySA+, SSCP, GSEC, or equivalent.\n\nPreferred Certification\n\nProfessional technical certifications such as CompTIA Security+, CySA+, CEH, SSCP, or GSEC, with demonstrated progression toward a senior-level technical certification. Platform-specific certifications are considered supplemental to demonstrated hands-on capability.\n\nNote: All offers are contingent upon successful completion of a background check\n\n*Posted positions are not open to third party recruiters and unsolicited resume submissions will be considered free referrals.\n\nAGS is an equal opportunity employer","company":"Agsll","rawCompany":"agsll","city":"Duluth","state":"GA","isRemote":false,"isActive":false,"createdAt":"2026-10-02T12:11:52.144Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Engineer","description":"Job Overview\n\nThe Security Engineer is responsible for the secure configuration, hardening, and ongoing operation of the AGS security control set and the systems those controls protect. The role ensures that documented security policy and technical standards match what is actually configured in the environment, identifies and remediates configuration drift and misconfiguration, and keeps the technical estate aligned to current industry baselines as they evolve. This is a hands-on engineering role focused on sustained operational quality, taking ownership of the platforms and standards the security team implements and keeping them healthy, current, and effective over time. The role receives technical direction from the Senior Security Engineer and partners closely with Infrastructure, Network, Enterprise Apps, and Business Systems teams.\n\nResponsibilities\n\nLead system and platform hardening across servers, endpoints, network devices, and cloud services using recognized configuration baselines such as CIS Benchmarks and vendor security baselines.\nValidate that logical configuration across the environment aligns to documented security policy and technical standards, and remediate deviations.\nIdentify, document, and remediate misconfigurations across infrastructure, identity, and security tooling.\nImplement and monitor configuration drift detection and drive corrective action where baselines have decayed.\nEnforce endpoint baseline hardening and device compliance policies through enterprise endpoint management tooling.\nOperationalize device control, application control, and disk encryption policies.\nAdminister day-to-day operation, tuning, and lifecycle maintenance of enterprise security platforms, including endpoint protection, email security, and access control tooling.\nMaintain security tooling coverage and health, and resolve gaps in agent deployment or policy application.\nSupport vulnerability remediation by implementing patches, configuration changes, and compensating controls in coordination with IT operations.\nImplement changes required to keep the environment aligned with evolving industry standards, vendor guidance, and control framework updates.\nImplement and maintain security controls for hybrid environments combining on-premises infrastructure and cloud-based systems.\nUse scripting and automation (PowerShell, KQL, Graph API) to reduce manual configuration work and enforce consistency.\nMaintain accurate technical documentation for configuration standards, operational procedures, and control implementation.\nPartner with systems, network, database, and application teams to implement security requirements without unnecessary disruption to operations.\nProvide technical evidence supporting internal and external audit, certification, and regulatory assessment activities.\nParticipate in the incident response lifecycle as assigned, including containment, eradication, and recovery support.\nBalance security requirements with user experience needs to maintain productivity alongside a strong security posture.\nOccasional travel throughout the United States.\n\nQualifications\n\nSecure configuration and hardening: CIS Benchmarks, DISA STIGs, or vendor security baselines across Windows and Linux systems.\nEndpoint management and compliance: MDM/MAM tooling, compliance policies, security baselines, device and application control.\nEnterprise security platform administration: endpoint protection (EDR/XDR), email security, access control tooling.\nConfiguration drift detection and remediation, and reconciling documented policy against live configuration.\nPatch and vulnerability remediation execution, including compensating control design.\nHybrid infrastructure fundamentals: virtualization, enterprise directory services, and cloud service configuration.\nScripting and automation (PowerShell, KQL, Graph API); configuration management or infrastructure-as-code preferred.\nWorking understanding of network segmentation and access control concepts.\nStrong documentation discipline and attention to detail.\n\nSkills/Requirements\n\nBachelor's Degree in Computer Science, Information Security, Information Technology, or equivalent work experience.\nAt least 3 years of experience in security engineering, systems engineering, or infrastructure operations with meaningful security responsibility.\nDemonstrated hands-on experience hardening Windows and Linux systems against recognized configuration baselines.\nPractical experience administering enterprise security tooling such as endpoint protection, email security, or access control platforms.\nExperience reconciling documented policy against live system configuration and closing the resulting differences.\nExperience working in hybrid environments with a mix of on-premises and cloud-based systems.\nFamiliarity with industry frameworks (NIST, CIS, ISO 27001) and how framework requirements translate into technical configuration.\nDemonstrated ability to balance robust security controls with positive user experience and business enablement.\nRelevant technical certifications required or strongly preferred: CompTIA Security+, CySA+, SSCP, GSEC, or equivalent.\n\nPreferred Certification\n\nProfessional technical certifications such as CompTIA Security+, CySA+, CEH, SSCP, or GSEC, with demonstrated progression toward a senior-level technical certification. Platform-specific certifications are considered supplemental to demonstrated hands-on capability.\n\nNote: All offers are contingent upon successful completion of a background check\n\n*Posted positions are not open to third party recruiters and unsolicited resume submissions will be considered free referrals.\n\nAGS is an equal opportunity employer","datePosted":"2026-10-02T12:11:52.144Z","dateModified":"2026-10-02T12:11:52.144Z","hiringOrganization":{"@type":"Organization","name":"Agsll","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Duluth","addressRegion":"GA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"9285e5f5a67178239c705def"},"url":"https://jobsearcher.com/jobs/9285e5f5a67178239c705def"}}