Top Remote Entry Level Cybersecurity & IT Jobs in NYC, NY

Implement and operationalize Microsoft Purview and Microsoft 365 data protection controls for clients. Responsibilities include designing classification frameworks and sensitivity labels, configuring and tuning DLP, retention, lifecycle, and Insider Risk Management policies, assessing Microsoft 365 security settings, protecting sensitive data, facilitating requirements workshops, producing technical documentation, and supporting client handoff. The role requires hands-on production implementation, direct client engagement, and expertise across Microsoft 365 workloads.

Support a global 24x7x365 security operations team by monitoring systems and networks, investigating threats and incidents, responding to phishing, malware, breaches, and cyberattacks, deploying countermeasures, analyzing post-event activity, assessing vulnerabilities, and improving security protocols. The role requires familiarity with cloud security controls, network protocols, operating systems, scripting, web technologies, penetration testing tools, and threat intelligence.

Participate in a paid remote research interview about integrating vulnerability verification into CI/CD pipelines. Explain a recent project involving full-stack development, secure deployments, application security practices, and production pipeline challenges. Review conceptual secure application workflows and provide practical feedback. Candidates should have professional experience in full-stack engineering, DevSecOps, or security-focused backend development, with hands-on CI/CD configuration and vulnerability verification experience.

Monitor and investigate security alerts across enterprise systems, networks, endpoints, and applications. Perform alert triage, incident validation, escalation, documentation, and support for containment and remediation. Analyze security logs and SIEM correlations, conduct basic threat intelligence investigations, assist with vulnerability monitoring, and improve detection rules and SOC processes.

Lead governance, risk, and compliance activities for an enterprise AI platform. Define and mature SOC 2 and ISO 27001 controls, collect evidence, track remediation gaps, prepare audits, and create customer-facing security documentation. Partner with engineering, security, product, auditors, and client stakeholders to embed practical, automated compliance practices covering data handling, retention, access control, privacy, AI governance, and customer assurance.

Implements, configures, and maintains cybersecurity, networking, and cloud technologies for clients. Assesses environments against security frameworks, administers networks, monitors events, investigates suspicious activity, develops SIEM detections, troubleshoots technical issues, documents procedures, and supports client projects. The role collaborates with SOC and other teams while delivering secure solutions and client-facing managed security services.

Monitors and analyzes network traffic, responds to and investigates security incidents, collaborates with the SOC team to improve security procedures, ensures compliance with security standards, and uses CrowdStrike and related tools to protect systems.

Support enterprise identity and access management by provisioning, modifying, and de-provisioning accounts across mainframe, cloud, and enterprise platforms. Review access requests, enforce least privilege, maintain IAM documentation, capture security logs, and provide audit evidence. Respond to IAM audit inquiries, communicate with stakeholders to resolve access issues, and assist with implementing IAM improvements and regulatory compliance initiatives.

Build and lead Cape’s security technical program across detection and response, corporate security, and product security. Define strategy, priorities, metrics, roadmaps, and execution processes; manage security tooling procurement and implementation; maintain backlogs; coordinate dependencies; and translate security risks and requirements between security engineers and the broader engineering organization.

Lead federal and VA cybersecurity compliance activities for HSM and post-quantum cryptography environments. Support RMF, ATO preparation and renewal, continuous monitoring, FIPS 140-3 and CMVP evidence, vulnerability and patch compliance, security reviews, incident response, and authorization documentation. Translate technical HSM, PKI, and cryptographic configurations into compliance artifacts and coordinate with VA security stakeholders, including ISSOs, OIS, CORs, and program teams. The role is primarily remote with limited customer-site travel.