> Markdown version of [/jobs/ext/2610457-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/2610457-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Hb Mechanical Group - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Microsoft Azure, Backup Devices, CompTIA Security+, Cyber Security, Data Recovery, Domain Name System Security Extensions, Domain Name System (DNS), Multi-Factor Authentication, Information Technology Operations, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Network Information Services, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Phishing, Security Information and Event Management, Software Vulnerability Management, Zoho Office Suite, Cloud Platform System, Okta, Cyber Threat Analysis, Falcon Platform, Information Technology, Gsuite, CIS Benchmarks, Veeam, Cisco - **Published:** August 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=efc0d582036dff09 ## About the Role * High School Diploma * BA/BS in Information Technology, Computer Science, Cybersecurity, or equivalent experience * Relevant security certifications and continuing education preferred Experience (Required) * 5+ years of hands-on experience in cybersecurity engineering, security operations, or a blended security/IT role. * Demonstrated ability to both build and operate security controls with minimal supervision as a security generalist. * Hands-on experience with EDR/endpoint security and SIEM (CrowdStrike strongly preferred). * Strong identity and access management experience (Entra ID / Active Directory, Okta, MFA, conditional access). * Experience securing Microsoft 365 and cloud environments (Microsoft Azure). * Practical incident-response and threat-hunting experience, with solid networking and firewall fundamentals. * Experience working with outside security vendors/managed services and coordinating deliverables to timelines and quality expectations. Skills & Technical Knowledge * Working knowledge of security frameworks and best practices (e.g., NIST Cybersecurity Framework, CIS Controls) and the ability to enforce data/access security policies. * Scripting and automation ability (PowerShell and/or Python) for routine tasks and tool integrations. * Strong analytical and problem-solving skills; able to communicate clearly with technical and non-technical stakeholders. * Ability to pull data from multiple security platforms and present the organization's security posture in clear reports and dashboards for executive, non-technical audiences. * Extensive knowledge of Microsoft Entra ID / Active Directory, Microsoft 365, and Azure security. * Familiarity with email security, DNS security, and backup/disaster-recovery concepts. * Familiarity with confidentiality requirements related to IT operations and network information., * Industry certifications such as CISSP, SSCP, CompTIA Security+/CySA+, GIAC (GCIH, GCIA), or CrowdStrike / Microsoft Azure security certifications. * Direct experience with our stack: CrowdStrike, Mimecast, Cisco Meraki, Cisco Umbrella, Druva, Veeam, Google Workspace, Okta, and 1Password. * Experience standardizing security across multiple sites or business units within a growing, multi-entity organization. * Experience integrating or supporting newly added business units. * Experience in a multi-division or federated IT/security environment. PHYSICAL REQUIREMENTS: * Prolonged periods sitting at a desk and working on a computer * Must be able to lift up to 15 pounds at times * Ability to travel to divisions and worksites as needed ## Description This position will report to HB Mechanical Group, LLC, a subsidiary of HB Global., SUMMARY: The Cybersecurity Engineer is HB Global's dedicated, hands-on owner of cybersecurity operations and engineering across the enterprise. Reporting to the Director of IT, who owns the enterprise security strategy, and partnering with third-party solution architects where specialized design is required, this role translates strategy into working, well-managed security controls. It is a true generalist position: on any given week the engineer performs day-to-day threat hunting, monitoring, and incident response, then implements, configures, and manages the tools that protect the organization. This position operates in a multi-division enterprise environment in which divisions maintain autonomy in business decisions; the Cybersecurity Engineer maintains consistent enterprise security standards while adapting to each division's needs and supporting the integration of newly added business units., Threat Detection, Hunting & Response * Perform day-to-day threat hunting, monitoring, and alert triage across the CrowdStrike Falcon platform (EDR, NG-SIEM, and Identity Threat Protection). * Investigate, contain, and remediate security incidents end to end; perform root-cause analysis and document findings and lessons learned. * Tune detections, correlation rules, and alerting to reduce noise and improve fidelity. * Monitor and respond to email-borne threats and user-reported phishing through Mimecast, managing quarantine and policy tuning. Security Engineering, Implementation & Configuration * Implement, configure, and maintain security controls across Microsoft Azure and on-premises systems, coordinating with third-party architects on solution design where required. * Administer identity and access security across Microsoft Entra ID / Active Directory, Okta, Microsoft 365, and Google Workspace, enforcing least privilege, MFA, and conditional access. * Manage endpoint protection and DNS-layer security (Cisco Umbrella), and support network security policy on Cisco Meraki in partnership with the Senior Network Administrator. * Own vulnerability management, including scanning, prioritization, and coordinating remediation within the IT team. * Partner with the Senior Systems Administrator - who administers our data protection and recovery tools (Druva, Veeam) - to validate and test backup integrity and to participate in disaster-recovery testing. * Manage the secrets and password platform (1Password) and champion strong credential hygiene across the organization. Security Operations & Management * Maintain security configuration standards and hardening baselines aligned to the strategy set by leadership. * Plan, track, and report on security initiatives using Zoho Projects. * Manage day-to-day relationships with security vendors and managed-service providers, holding third parties accountable to their commitments. * Own the Mimecast security-awareness program, including scheduling and managing quarterly awareness trainings and quarterly phishing simulations, and reporting on progress and completion rates. Reporting, Metrics & Executive Communication * Produce clear, regular reporting on the organization's overall cybersecurity posture, translating technical detail into concise summaries for leadership and executive audiences. * Pull and correlate data from across the security stack - CrowdStrike (EDR, NG-SIEM, Identity Threat Protection), Mimecast, Cisco Umbrella and Meraki, identity, and vulnerability tools - into clear, easy-to-understand reports and dashboards. * Define and track key security metrics and KPIs (such as detection and response times, vulnerability remediation, patch status, and phishing-test results) and report on trends over time. * Provide on-demand snapshots of the current security state and clearly communicate risks, priorities, and recommendations to non-technical stakeholders. Business Partnership & Business-Unit Integration * Partner with multiple semi-autonomous divisions to deliver consistent security protections, adapting engagement and communication to each division's operational needs while maintaining enterprise standards and governance. * As HB Global grows and brings new business units into the organization, onboard and standardize their security controls to HB Global's baseline. * Assess the security posture of incoming environments and build practical plans to consolidate identity, endpoint, email, network, and backup protections. Governance & Collaboration * Support compliance, audit, and cyber-insurance requirements with clear evidence and documentation. * Partner with leadership to turn security strategy into hands-on execution, and flag risks and priorities as they emerge. * Partner closely with the Senior Network Administrator - who is responsible for network security - to validate network security controls and to provide backup and cross-coverage for the network security function. Other * Perform other duties as assigned ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)