BizTek People, Inc.

Security Engineer

• Design, implement, and maintain enterprise application allowlisting policies in IT and OT environments
• Implement and manage AppLocker policies for Windows environments
• Deploy and tune Microsoft Defender Application Control (WDAC / App Control for Business)
• Deploy and manage Red Hat fapolicyd for Linux systems
• Define trusted sources using publisher, hash, and path rules
• Integrate logs into SIEM tools such as Splunk for monitoring and alerting
• Develop automation using Group Policy, Intune, and Ansible
• Reduce attack surface by enforcing default-deny execution controls
• Collaborate with multiply teams to onboard systems and software into allowlisting
• Support governance boards (ARB, TRB, CAB) and documentation requirements
• Deliverables Allowlisting policy framework and standards AppLocker, WDAC, and fapolicyd configurations Automation scripts and deployment guides Documentation for audits and compliance Metrics and reporting on allowlisting effectiveness Consult with project team and other stakeholders, e.g., IT practitioners, the Cybersecurity and Compliance teams, Enterprise Architecture, Applications, Infrastructure, Network, Database, OCM, etc. during testing and implementation. All changes will follow the Change management policies and procedures.

Cybersecurity Specialist – Senior