Fortellar

Cloud Engineer

• Design, deploy, and operate cloud security posture, data protection, and detection and response capabilities for clients
• Lead large-scale, multi-workstream security remediation engagements
• Close major pools of open cloud security findings and transition detection and data security capabilities from incumbent vendors to Microsoft platforms
• Assign owners and closure dates to cloud findings and review standing exemptions
• Eliminate anonymous and public access from internet-facing cloud resources
• Rotate and remove embedded secrets and disable shared-key access across storage accounts
• Establish private link connectivity, network rules, network security group coverage, and managed identity standards
• Route diagnostic and platform logging into Microsoft Sentinel while managing ingestion scope and cost
• Implement landing-zone guardrails as policy-as-code and review attack paths monthly
• Triage and close high-severity security incidents with documented disposition and evidence
• Author and publish incident response plans, severity matrices, escalation paths, and incident definitions
• Complete mail-flow, quarantine, and anti-impersonation configuration
• Facilitate cross-functional response during critical incidents
• Define monitoring coverage and out-of-hours escalation paths, establish threat hunting, and facilitate tabletop exercises
• Build and tune Microsoft Sentinel analytics rules, watchlists, workbooks, data connectors, and detection coverage
• Evaluate managed detection sourcing and transition detection platforms while operating incumbent services in parallel
• Design and deploy automated and agentic response playbooks with scoped credentials and human approval for production containment
• Reduce alert volume and mean time to resolution through tuning, automation, and false-positive suppression
• Evaluate emerging tooling and AI-driven detection and response capabilities
• Design and operate pilot rings and staged rollouts for disruptive changes
• Prepare, submit, and present change records with risk, blast radius, validation steps, and backout plans
• Execute changes during scheduled maintenance windows, including evenings and weekends when necessary
• Halt or defer unsafe rollouts and communicate schedule impacts to engagement leads and clients
• Represent Fortellar credibly before client technical staff and executives, in person and virtually
• Travel 10%–20% to client sites

Explore Senior Security Engineer – Cloud Security, Detection at Fortellar. Review requirements and application details.

Senior Security Engineer – Cloud Security, Detection

Security Engineer

• Design, deploy, and operate identity, privileged access, vulnerability, endpoint, and device trust controls for Fortellar’s clients
• Support large-scale, multi-workstream security remediation engagements
• Design and enforce phishing-resistant MFA for administrators and MFA for the full user population using FIDO2 security keys, Windows Hello for Business, and passkeys
• Reduce privileged directory role membership and remediate domain-dominance exposure
• Redesign Conditional Access around user and administrator personas and apply role-based access control
• Implement Privileged Identity Management with just-in-time elevation and enforce sign-in frequency and non-persistent administrator sessions
• Evaluate, select, deploy, and operate privileged access management and identity governance capabilities
• Establish quarterly access recertification
• Remediate vulnerabilities with published exploit code or observed exploitation
• Author and publish vulnerability management procedures and workstation patch service levels
• Deploy Windows Autopatch and Microsoft Intune update rings
• Reconcile Active Directory, Intune, and Defender device populations into a single authoritative asset inventory
• Map application dependencies and retire legacy authentication protocols
• Enforce LDAP server signing and channel binding
• Deploy security baselines in staged waves and address end-of-support systems and software
• Manage local administrator credentials and certificate lifecycles
• Review exposure scores, remediation activity, and threat intelligence on a defined cadence
• Enforce BYOD controls, deploy Intune application protection policies, and execute mobile application and device management plans
• Harden SaaS applications, require compliant or hybrid-joined devices, enable remote wipe, and apply unmanaged-browser session controls
• Establish device attestation within joiner, mover, and leaver processes
• Design and operate pilot rings, staged rollouts, rollback procedures, and break-glass accounts
• Prepare and present change records, execute changes during maintenance windows, and halt or defer unsafe rollouts
• Communicate rollout decisions and schedule consequences to engagement leads and clients

Explore Senior Security Engineer – Identity & Endpoint at Fortellar. Review requirements and application details.

Open roles

Senior Security Engineer – Cloud Security, Detection

Senior Security Engineer – Identity & Endpoint