Senior Cybersecurity Engineer

Department: Information Security Revision Date: September 9, 2025
FLSA Status: Exempt EEO-1: 3 - Professionals
New Job Current Job Revisions


Senior Cybersecurity Engineer


Scope and Purpose of Position:

The Senior Cybersecurity Engineer is responsible for the development, implementation, and operations of technical systems and controls necessary to safeguard the company's information and assets. This position will work directly with technical and non-technical staff to protect the confidentiality, integrity, and availability of sensitive data and systems.

This position will be involved in a wide range of issues and projects, including the development of secure software, architectures, tools, and controls utilizing security best practices and industry standards, with an underlying focus on compliance with major governance and regulatory standards such as SOX, SOC 2, PCI, HITRUST, & HIPAA.

Essential Functions:

Leadership
• Provide mentorship and technical guidance to less experienced cybersecurity team members, fostering growth and knowledge-sharing
• Lead incident response activities, tabletop exercises, IR planning, etc.
• Drive team's execution of all assigned OKRs
• Track and report on KPIs
• Serve as technical escalation point for internal Cybersecurity Analysts as well as the MSSPs, such as the MDR & SOC teams
• Contribute thought leadership and hands-on expertise to influence the direction of the information security program

Core Engineering
• Design, deploy, manage, enhance, tune, and expand enterprise-wide security systems, including enterprise encryption, SWG, ZTNA, NGFW, XDR, large scale security event logging and correlation systems, WAF, DLP, PAM, MFA, IDAM, SCA/SAST/DAST, CNAPP, decoy systems, central config control systems such as Intune, Tanium, etc.
• Evaluate the applicability, effectiveness, and/or necessity of new and existing security tools
• Work with application and infrastructure teams to ensure the safe and security-integrated development and deployment of COTS, SaaS, IaaS, PaaS, etc.
• Secure M365, Azure & other cloud environment designs & configurations, and ensure integration with core security systems and controls

SecOps & IR
• Provide technical security leadership during incident response, and perform analysis of security incidents
• Investigate and mitigate security threats, and support other IT organizations in the diagnosis of potential security incidents

Support
• Interface with both technical and non-technical individuals and groups to assist with security issues and identify new security opportunities arising from advancements in security and newly defined security best practices.
• Partner with other teams in the design and implementation of systems, applications, processes, and/or other related technologies to adhere to security and compliance best practices, regulations, laws, and/or company programs, procedures, policies, and guidelines

Reporting & Documentation
• Assist SecOps with developing and performing routine (daily, weekly, monthly, quarterly, & yearly) reporting on our security events, trends, and system hygiene & posture, such as on our IaaS environments & critical SaaS environments
• Work with other cybersecurity engineers to report on security program and project status, performance, and gaps
• Develop and maintain security documentation including diagrams, security standards, and disaster recovery manuals, and support the security strategy by outlining the requirements and benefits of specific security tools and/or solutions

Governance, Risk, & Compliance
• Perform and/or assist with remediation efforts as a result of penetration tests, enterprise-wide vulnerability assessments, etc.
• Assist Risk Management with the identification and documentation of risks throughout the environment, including the evaluation of incoming systems
• Support internal, customer, and independent audits, as necessary
• Assist in the development of solutions to address defined security remediation action plans, including POAMs and Risk Treatments

Other Duties
• Support physical security access management and monitoring solutions
• Work with management and technology leads within the organization to ensure alignment with shared goals and strategies
• Maintain current knowledge of industry trends in security and compliance

Education and Experience:

• Bachelor’s Degree in Computer Science, Computer Engineering, or Information Security / Cyber Security required
◦ Equivalent combination of education, training, and experience will be considered in