IT Security Engineer

About The Role:

Join a growing team of IT professionals who have a passion for the potential of technology tools to transform the work of a nonprofit. As the IT Security Engineer, you will play an important role in building VentureWell’s cybersecurity and Governance, Risk & Compliance (GRC) program, including managing day-to-day security operations, investigating events, identifying areas of risk, and building out security focused documentation. We are looking for someone who has a passion for technology, teamwork, and continuous improvement. 

Responsibilities:

Security Operations & Threat Management (40% of time)

• Monitor and respond to security alerts, vulnerability reports, and threat intelligence
• Perform root cause analysis on security incidents and recommend corrective actions
• Manage endpoint protection, cloud configuration monitoring, and IAM role reviews
• Maintain continuous monitoring dashboards (e.g., Datadog, Jamf, Google Admin, Amazon Web Services (AWS) CloudWatch)
• Lead the design and execution of vulnerability assessments, penetration tests, and security audits.

Governance, Risk & Compliance (35% of time)

• Support NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) control implementation and validation
• Maintain the System Security Plan (SSP) and Plan of Action & Milestones (POA&M)
• Draft, review, and maintain security policies, standards, and procedures
• Conduct Security Impact Analyses (SIA) for configuration or architectural changes
• Coordinate evidence collection for internal and external audits
• Ensure secure configuration baselines are documented and reviewed regularly

Security Engineering and Cloud infrastructure (25% of time)

• Implement and maintain secure configurations in AWS, Salesforce, Box, and Google Workspace
• Manage access controls, Multi-Factor Authentication (MFA) enforcement, and session management policies
• Automate security tasks via scripts or cloud-native tools
• Participate in architecture reviews to ensure security-by-design principles
• Recommend new tools or integrations to enhance visibility and compliance automation

What You Bring:

• Bachelor’s degree in Information Security, Computer Science, or equivalent experience
• Minimum of 4 years of direct experience supporting and adhering to cybersecurity compliance (GR&C)
• One or more of the following industry certifications preferred:
• CompTIA Security+
• GIAC Information Security Fundamentals
• AWS Certified Security – Specialty
• ISC2 CC or CISSP (Associate level acceptable)
• Extensive experience with security monitoring and assessment tools
• Experience with cloud security best practices
• Familiarity with NIST special publications and frameworks (800-171, CSF)
• Fundamental knowledge of key security concepts including defense in depth, least privilege, and zero trust
• Experience with NIST 800-171 / CMMC Level 2 / CSF implementation and audit prep
• Excellent analytical, documentation, and cross-functional communication skills
• Familiarity with Software-as-a-Service (SaaS) applications including Google Workspace, Salesforce, Okta
• Working technical knowledge of Open Worldwide Application Security Project (OWASP) Top 10 security risks and mitigation strategies
• Experience with vulnerability management, log aggregation, and SIEM solutions
• Proven ability to operate as a self-starter, working autonomously and driving initiatives forward with minimal oversight

Across the Board, VentureWell Staff:

• Are able to succeed and thrive in an environment with competing and changing priorities and tight deadlines
• Have track records of and ability to build solid collaborative working relationships, and are proven team players who enjoy a “customer service” orientation to collaboration
• Are committed to embedding equity for all in our internal practices and culture and in our programs in order to live and achieve our mission
• Bring openness and engagement to personal, professional, and organization-wide learning
• Are curious and committed to issues of environmental sustainability
• Are self-starters with excellent attention to detail and a commitment to delivering high-quality work 
• Are active learners who independently learn new tools and work processes quickly
• Have excellent written and oral communication skills

Our Benefits*:

• An attracti