Senior Cybersecurity Engineer

Description

The Senior Cybersecurity Engineer is a key member of the Information Technology team responsible for designing, implementing, and managing enterprise security technologies, programs, and processes that protect organizational systems, networks, and data.

• Support CMMC Level 1 and Level 2 compliance initiatives, including implementation, documentation, assessment preparation, and ongoing control management.
• Administer and enhance Microsoft 365 security capabilities, including Microsoft Purview, Microsoft Defender, eDiscovery, and related compliance tools.
• Serve as the primary point of contact for information security matters, including security awareness, risk identification, and definition of system security requirements.
• Engineer, implement, and monitor security controls to protect computer systems, networks, applications, and organizational information.
• Design security architecture and develop detailed security designs that align with organizational needs and industry best practices.
• Prepare, maintain, and update documentation for core security functions, operational processes, and standard operating procedures.
• Configure, maintain, and troubleshoot security infrastructure devices and related systems.
• Develop and implement technical solutions and security tools to identify, reduce, and mitigate security vulnerabilities.
• Lead incident response, forensic analysis, and post-incident investigative activities for security events and suspected compromises.
• Develop and maintain tools, processes, and infrastructure to support automation of incident response activities.
• Create comprehensive reports that summarize assessment findings, outcomes, risks, and recommendations for continued security improvement.
• Support third‑party audit activities by preparing evidence, coordinating responses, and assisting with remediation efforts.
• Collaborate with internal teams across Geo Engineers to deploy security tools, improve processes, and promote consistent security practices across the organization.
• Act as Incident Response and Crisis Management Lead during declared security incidents.
• Manage vulnerability mitigation strategies and maintain vulnerability scanning efforts across internal and external resources.
• Serve as a resource for network engineering and administration activities as needed.

• Experience with Arctic Wolf, Cisco Meraki, KnowBe4, Cisco Umbrella, Cisco DUO, Nexpose.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field from an accredited college or university; equivalent combinations of education, certification, and relevant work experience may be considered.
• 5+ years of related IT experience, including at least two years in an information security‑focused role; experience in a corporate or professional services environment is highly preferred.
• One or more recognized industry certifications preferred, such as CCNA, CISSP, Security+, or similar credentials.
• Strong technical expertise with demonstrated ability to implement security solutions based on current security principles, techniques, protocols, and best practices.
• Demonstrated experience building and maintaining security systems, including firewalls, intrusion detection and prevention systems, endpoint protection, authentication platforms, log management, content filtering, and related technologies.
• Solid foundation of higher-level information security concepts, assessment methodologies, and integration of security practices into an organization such as Geo Engineers.
• Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, TLS, SSL, BGP).
• Possess demonstrable experience with a multitude of information security technologies and processes such as: intrusion detection systems, web application firewalls, centralized logging solutions, endpoint security, data loss prevention systems, security information and event management systems, content delivery platforms, load balancers, single sign on systems, cloud platforms, threat intelligence, event correlation, virtualization technologies, system and application vulnerability assessment tools,…