CYBER SECURITY ENGINEER

Summary 

The Cyber Security Engineer is an owner of the security systems the business runs on. This role designs, integrates, and manages the security platforms and controls that protect the organization, and maintains a working knowledge of the infrastructure, network, and cloud environments those controls operate within — monitoring them for risk without owning their day-to-day administration. Escalations reach this role when issues are genuinely hard or touch the underlying security architecture itself. The Cyber Security Engineer's work is defined as much by projects and platforms as by tickets — standing up new security capabilities, hardening the environment by design, and making the technical decisions that Information Security Analysts and other IT staff build on.

Essential Duties and Responsibilities include the following. Other duties may be assigned. 

•    Designs, builds, and owns the security architecture across infrastructure, network, cloud, and applications, including segmentation, identity and access management, and zero-trust controls.

•    Serves as the escalation point for security incidents and issues that are technically complex or require architectural changes, going beyond day-to-day monitoring and triage.

•    Leads security projects end to end — evaluating, selecting, and standing up new platforms and capabilities such as SIEM, EDR/XDR, vulnerability management, IAM/PAM, and cloud security posture management tools.

•    Designs the security hardening standards and baselines for servers, network devices, and cloud environments that other IT teams implement and maintain.

•    Owns the architecture and controls needed to maintain PCI, SOX, and other compliance requirements, and represents security engineering in internal and external audits.

•    Leads root cause analysis and technical remediation for significant security incidents, and drives architectural changes that prevent recurrence.

•    Designs and continuously improves the vulnerability management program, including scanning strategy, risk-based prioritization, and remediation workflows.

•    Architects security for cloud environments (AWS/Azure/GCP), including network design, identity, encryption, logging, and posture management.

•    Builds automation and tooling (scripting, infrastructure as code) to reduce manual security work and improve detection and response times.

•    Performs threat modeling and security risk assessments for new systems and projects prior to go-live.

•    Provides technical mentorship and guidance to Information Security Analysts and other IT staff on security best practices and tooling.

•    Evaluates security vendors and technologies, and owns technical vendor relationships for security tooling.

•    Documents and maintains security architecture diagrams, standards, and runbooks in the organization's knowledge base.

•    Stays current on emerging threats, security architecture patterns, and industry standards, and translates them into changes to the environment.

•    Protects the organization's value by keeping information confidential.

•    Accomplishes organizational goals by taking ownership of new and different initiatives and identifying opportunities to add value beyond assigned tasks.

Position Type/Expected Hours of Work

Work hours are typically 8 am to 5 pm; this may vary depending on project needs, on-call rotations, and incident response requirements.

Competencies:

•    Security architecture and design

•    Technical leadership and mentoring

•    Project and platform ownership

•    Sound judgment under ambiguity

•    Strategic thinking

•    Excellent verbal communications skills

•    Able to work with minimum supervision

•    Able to manage multiple concurrent projects

•    Strong knowledge of security tooling and platforms

•    Ethical Conduct

•    Technical Capacity

•    Time Management

•    Organizational Skills

•    Problem Solving/Analysis

•    Discretion

•    Thoroughness

•    Initiative

•    Abides by all laws, regulations, policies, work procedures and instructions

•    Professional appearance

•    Business casual

•    Abides by all safety rules, and, if applicable, uses appropriate safety equipment in designated areas

Qualifications: