Cybersecurity Engineer III

Habemco is a shared services company wholly owned and operated by the Habematolel Pomo of Upper Lake, a federally recognized Native American tribe located in Northern California. Habemco’s support services such as product development and technology which are needed for business growth, ultimately power the Tribe’s economy, and enable the delivery of education, health care and elder support programs for the Tribal community.

Our talented team provides cross-functional support services to various tribal business and government entities. The Habemco team plays a critical role in ensuring a successful future for our customers, our employees, and the Tribe.

Headquartered in a beautiful, yet remote part of California, the Tribe recognizes that to compete in highly competitive industries such as Fin Tech, the Tribe must access expertise throughout the nation. In addition to employees that work remotely, the Tribe has employees located at its headquarters in Upper Lake, California and at a campus in Lenexa, Kansas.

Employees receive competitive pay and benefits, quarterly performance bonuses and 401(k) with a 4% match. Our team is creative, forward-thinking, passionate and moves fast! Are you ready to grow with us?

Implement security systems to enhance the organization's ability to identify, detect, respond to, and recover from cyber threats and vulnerabilities. This role involves establishing security controls based on risk assessments, threat modeling, and analysis of current systems. The Cybersecurity Engineer ensures that systems and architectures comply with organizational security standards and guidelines while staying informed of emerging cyber threats. They will collaborate with teams to incorporate security controls into operational systems, supporting efforts to detect and mitigate malicious behavior.

Work is generally independent and collaborative in nature. Incumbent contributes to moderately complex aspects of a project.

• Responsible for ensuring the security of the organization's systems and information assets.
• Develops and implements security systems, guidelines, and strategies.
• Protects against unauthorized access, use, disclosure, disruption, modification, and/or destruction.
• Conducts audits and risk assessments.
• Evaluates internal operations and controls and makes recommendations based on the findings.
• Migrates non-compliant environments to compliant environments.
• Ensures compliance with data protection guidelines and applicable laws.
• Develops security measures to safeguard existing infrastructure based on risk assessment threat modeling and supports the integration of new security solutions.
• Creates action plans for system hardening, monitoring, incident response, and disaster recovery.
• Manages vulnerability discovery platforms in cloud architecture environments, CI/CD pipelines, Static Application Security Testing (SAST), Windows & Linux operating systems, software applications.
• Monitors, analyzes, and configures security systems to detect, respond to, and recover from cyber threats and vulnerabilities.
• Implements and tunes security tools such as SIEM, DLP, and IPS to monitor logs, alerts, and detect suspicious activity.
• Stays informed about emerging cyber threats and update monitoring processes accordingly.
• Collaborates with teams to incorporate security controls into operational systems to maintain a secure environment.
• Supports efforts to detect, mitigate, and respond to malicious activities within the organization's network and systems.
• Educates and trains staff on information system security best practices.
• In-person attendance and travel as requested.
• Other duties as assigned.

Required
:

• Bachelor of Science degree from an accredited university with a major in Cybersecurity, Computer Science, or another technical field or in lieu of education, four (4) or more years of experience working as a Cybersecurity Analyst or related position. Plus:
• Four (4) or more years of direct work experience demonstrating one or more of the following competencies:
• Access control, cloud security, computer information security.
• Four (4) or more years of…