Cybersecurity Engineer

This position DOES NOT support third-party submissions, subcontracting, or Corp-to-Corp (C2C) arrangements., We are seeking a Cybersecurity Engineer to help build and mature the information security program for a rapidly growing organization. This is a high-visibility, high-autonomy opportunity for a technically strong security professional who wants to move beyond maintaining an established environment and instead help shape one from the ground up. The ideal candidate combines hands-on security engineering depth with the vision to connect existing tools and processes into a coherent program and has the potential to grow into broader security leadership as the organization scales., * Monitor network traffic, systems, and logs for security threats, and respond to and investigate incidents.

• Conduct risk assessments, vulnerability scans, and coordinate penetration testing.
• Manage network security controls including firewalls, intrusion prevention systems, and SSL certificates.
• Monitor MDR platforms to detect and mitigate malicious activity.
• Ensure compliance efforts align with applicable regulatory requirements, including PCI and other sensitive data handling standards.
• Partner with IT leadership, cross functional teams, and vendors on security requirements and access reviews.
• Develop and enforce security policies, procedures, and staff education and awareness programs.
• Support business continuity and disaster recovery planning.
• Define metrics and reporting strategies to measure and communicate the progress of the security program.
• Help establish standards, operating practices, and security architecture as the organization grows.

• Bachelor’s degree in information technology, computer science, or a related field
• Five years of cybersecurity experience, with strong foundational knowledge of systems and networking.
• Hands on experience with SIEM, EDR, and related security monitoring and detection technologies.
• Vulnerability management and threat detection experience, including risk assessments and coordinating penetration testing.
• Incident response experience, with the ability to respond effectively to an incident from day one.
• Exposure to SOC operations, with the ability to perform or help establish a SOC function.
• Working knowledge of governance, risk, and compliance practices sufficient to understand a broader security program, including familiarity with frameworks such as NIST, ISO, and PCI.
• CISSP certification preferred.