Cybersecurity Engineer

Summary This position is responsible for designing, building, and improving the security controls that protect the organization’s information assets. The role owns security architecture decisions, evaluates and deploys security technologies, leads incident investigations, and sets the technical standards that the broader technology team operates against. This role requires deep technical expertise across enterprise security domains, sound risk judgment, and the ability to work collaboratively across various departments.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

Security Architecture and Engineering:
Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), Security Information and Event Management (SIEM) solutions, endpoint detection and response, email security, and identity protection. Evaluate and select new security technologies, define configuration standards, and produce the reference designs that security operations staff administer against.

Threat Detection and Incident Response:
Lead the investigation, containment, and resolution of security incidents. Build and tune detection content, correlation rules, and automated response actions. Develop and maintain the Incident Response Plan, conduct periodic tabletop exercises and drills, and produce post-incident reports with assigned corrective actions.

Vulnerability and

Risk Management:

Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards. Coordinate third-party penetration tests and validate remediation. Perform threat modeling and security design reviews for new systems and significant changes.

AI and Emerging Technology Security:
Perform security design reviews of AI services, models, agents, and integrations. Define and implement data protection controls for enterprise AI use, including data loss prevention, tenant boundaries, and logging. Support the AI governance program with technical assessments and control recommendations.

Automation and Engineering Practices:
Build automation and integrations that reduce manual security effort, including scripting, API integrations between security platforms, and configuration as code where applicable.

Project Management:
Lead medium to large projects related to improving overall cybersecurity posture. Define scope, sequence work, and coordinate delivery across technical teams. Projects will be prioritized based on impact and cost assessment.

Compliance and Auditing:
Translate regulatory requirements (e.g., GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, state regulations) into technical control designs. Support internal and external security audits and collaborate across internal teams on compliance and audit-related activities.

Documentation and Technical Leadership:
Build and maintain the security architecture documentation, configuration standards, and engineering runbooks. Provide technical direction to security operations staff and serve as the escalation point for complex security issues.

Essential Competencies and Skills Working knowledge of common security frameworks and the ability to translate them into technical controls (e.g., NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Controls).Deep understanding of enterprise security domains including identity and access management, endpoint detection and response, email and collaboration security, data protection, network security, and secure application delivery.

Experience architecting and administering Microsoft 365 and Microsoft Entra , including Conditional Access, Microsoft Defender XDR, Intune, and Purview.

Experience building and tuning detection content in a SIEM or XDR platform, including writing queries and correlation logic.

Proficiency with scripting and automation (e.g., Power Shell, Python) and integrating security platforms through APIs.Sound judgment under pressure, with the ability to direct containment decisions during an active security incident.

Strong written and verbal communication skills, capable of explaining complex security concepts to technical and non-technical audiences.

Experience securing and administering common enterprise generative AI solutions such as Microsoft Copilot and Google Gemini.

Education, Work Experience, and Certifications Bachelor’s degree or higher-level in Cybersecurity, Computer Science, IT Management, or other…