Cybersecurity Engineer I/II (Remote - US)

Design, implement, and maintain security controls across network, infrastructure, data, and application layers

Assist in the creation of security policies and standards for adherence.

Perform risk assessments and contribute to data protection strategies across structured and unstructured data

Assist in penetration testing and vulnerability assessments to identify and remediate risks

Develop and maintain tooling to aid in automation for threat detection, response, and reporting

Collaborate with DevOps and IT teams to embed security into CI/CD pipelines and cloud environments

Monitor and respond to security incidents, working closely with SOC and IR teams

Support compliance initiatives (e.g., NIST, SOX) through technical enforcement and documentation

Participate in red/blue team exercises and threat modeling activities

Continuously evaluate emerging threats and recommend proactive security measures

Contribute to the development of playbooks, runbooks, and operational procedures for security operations

• Authorized to work in the US
• Minimum 2 years of experience in cybersecurity engineering or related roles

Preferred Qualifications

• Bachelor’s degree or higher in computer science, cybersecurity, or related field.
• Able to work now and in the future without BNSF’s assistance (whether monetary, through sponsorship, or otherwise) in obtaining, maintaining, or extending employment authorization (including H-1B, STEM OPT/CPT, or TN nonimmigrant status).
• Proficiency in Python or Java for automation, scripting, and tool development
• Hands-on experience with penetration testing tools (e.g., Burp Suite, Metasploit, Nmap)
• Strong understanding of network security protocols, firewalls, IDS/IPS, and VPNs and an understanding of Zero Trust Networking principles
• Knowledge of data security principles including encryption, DLP, and access controls
• Experience securing web and mobile applications, APIs, and microservices
• Experience security containerized and ephemeral application deployments
• Familiarity with infrastructure security across on-prem, cloud (AWS/Azure/GCP), and hybrid environments
• Solid grasp of Security Operations Center (SOC) workflows, SIEM platforms, and incident response
• Certifications such as OSCP, CEH, CISSP, or GIAC are a plus
• Strong analytical and problem-solving skills
• Excellent communication and documentation abilities
• Ability to work independently and collaboratively in cross-functional teams
• Passion for continuous learning and staying ahead of the threat landscape
• Experience with secure access frameworks (SASE, ZTNA).
• Contributions to open-source security tools or research.

The range represents the amount bnsf | tech reasonably expects to pay for the position based on the level, scope, and responsibilities of the role. Individual compensation and level of position offered is determined by the hiring location and additional factors including but not limited to job-related skills, experience, and relevant education or training.In addition to base pay and bonus eligibility, BNSF offers a comprehensive benefits package. This is a full-time remote position. Employees may work from anywhere within the contiguous 48 states of the United States

Travel is up to 20%. Employees will be required to occasionally travel to our corporate headquarters in Fort Worth, TX for in person meetings. Travel expenses for business needs will be covered by BNSF, At BNSF, you will have access to a comprehensive and competitive benefits package including:

• An industry-leading 401(k) and renowned Railroad Retirement program.
• A range of robust health care options for you and your dependents (including domestic partners), including medical, dental, vision, telemedicine, mental health, cancer support, and high-quality care network options.
• Health care spending accounts (HSA) with employer contributions, as well as life and disability insurance, provided at no cost.
• Family benefits includingparental, pediatric and family building support, adoption and surrogacy reimbursement, and dependent care spending account (with employer match).
• Access to discounts on travel, gym memberships, counseling services and wellness support.
• Annual bonus (Incentive Compensation Program)
• Generous leave / time off policies.

be part of a team that values safety, inclusion, and excellence we are one of the largest U.S. railroads transporting the nation’s freight across 28 western states and 3 Canadian provinces. as a member of our team, you will play a role in supporting the movement of essential products and materials that help feed, clothe, supply, and power communities throughout America and the world. bnsf | tech: innovating and transforming the future of freight rail bnsf | tech is the technology division making BNSF the preeminent freight and mobility company in north america. are you ready to drive change? if you are passionate about making a difference and eager to advance your career in a dynamic and supportive environment, we want you on our team! join us in reshaping the future of freight rail and discover a fulfilling career where your contributions matter. we are committed to a culture where all employees are included, belong, and have equal opportunity to achieve their full potential.Come make a difference with us!, All positions require pre-employment background verification, medical review and pre-employment drug screen. You can find more information by reviewing theHiring Process. Federal authority requires BNSF employees, whose work requires unescorted access to secure areas of port facilities, to obtain a TWIC.More information is available athttps://www.tsa.gov/for-industry/twic