Cybersecurity Engineer, Contract (M365 and Google Workspace, Remote)
About OptiFlow Labs
OptiFlow Labs is the company behind FailSafe, a SaaS Security Posture Management platform for SMBs running Microsoft 365 and Google Workspace, launched May 2026. We are building a contractor bench of cybersecurity engineers who handle on demand remediation for our customers.
About the role
When a FailSafe customer needs hands on cleanup based on their security audit findings, we route the engagement to a contractor on our bench. Each engagement is scoped, paid hourly, and typically runs 1 to 8 hours.
What you will do
• Remediate identity findings: dormant accounts, unmanaged admin roles, MFA gaps, conditional access misconfiguration
• Review and clean up OAuth grants and third party app permissions
• Address license waste, orphaned mailboxes, and service account exposure
• Document changes made and hand off back to the client with a brief summary
• Coordinate scheduling and admin access with the client point of contact
You should have
• 5 or more years administering Microsoft 365 (Entra ID, Exchange, conditional access) or Google Workspace
• Working knowledge of OAuth scopes, IAM concepts, and SaaS security posture
• Familiarity with at least one of: NIST CSF, CIS v8, SOC 2, ISO 27001:2025
• Comfortable working in client tenants under named, temporary admin access
• Clear written communication for change documentation
Nice to have
• Background at an MSP or in cybersecurity consulting
• Conditional access policy design, M365 Defender, Entra ID Protection
• Experience with vendor risk review or third party SaaS hardening
Engagement structure
• 1099 contract, no minimum hours
• $150 per hour, paid biweekly
• Remote, United States based
• Flexible hours that fit supplemental work schedules
• NDA and background check required before first engagement
Apply tot his job
Apply To this Job
OptiFlow Labs is the company behind FailSafe, a SaaS Security Posture Management platform for SMBs running Microsoft 365 and Google Workspace, launched May 2026. We are building a contractor bench of cybersecurity engineers who handle on demand remediation for our customers.
About the role
When a FailSafe customer needs hands on cleanup based on their security audit findings, we route the engagement to a contractor on our bench. Each engagement is scoped, paid hourly, and typically runs 1 to 8 hours.
What you will do
• Remediate identity findings: dormant accounts, unmanaged admin roles, MFA gaps, conditional access misconfiguration
• Review and clean up OAuth grants and third party app permissions
• Address license waste, orphaned mailboxes, and service account exposure
• Document changes made and hand off back to the client with a brief summary
• Coordinate scheduling and admin access with the client point of contact
You should have
• 5 or more years administering Microsoft 365 (Entra ID, Exchange, conditional access) or Google Workspace
• Working knowledge of OAuth scopes, IAM concepts, and SaaS security posture
• Familiarity with at least one of: NIST CSF, CIS v8, SOC 2, ISO 27001:2025
• Comfortable working in client tenants under named, temporary admin access
• Clear written communication for change documentation
Nice to have
• Background at an MSP or in cybersecurity consulting
• Conditional access policy design, M365 Defender, Entra ID Protection
• Experience with vendor risk review or third party SaaS hardening
Engagement structure
• 1099 contract, no minimum hours
• $150 per hour, paid biweekly
• Remote, United States based
• Flexible hours that fit supplemental work schedules
• NDA and background check required before first engagement
Apply tot his job
Apply To this Job