Cybersecurity Engineer

Description

A Cybersecurity Engineer role based in Woodinville, WA is available helle Wine Estates (SMWE).The Cybersecurity Engineer is a hands-on role responsible for securing and supporting the organization's infrastructure, identity, endpoints, and security operations. This position focuses on vulnerability management and automated remediation across hybrid environments, leveraging industry-leading security, endpoint management, and IT service management platforms. The role also supports security monitoring, incident response, secure configuration management, security assessments, compliance initiatives, and continuous improvement of the organization's cybersecurity posture.

Please Note:
Successful candidate will need to be based within commuting distance of our Woodinville, WA location.

Ste. Michelle Wine Estates is the largest wine company in the Pacific Northwest, and among the largest premium wine companies in the U.S, with roots dating back to 1933. Throughout our 90+ year history, what has remained constant is our unwavering commitment to quality, service to our customers, and connection with our community. We are proud that our award-winning wines farmed in Washington are an expression of all the best things about the Pacific Northwest - the spirit of people, the abundance of the land, and the excellence-driven culture.

Our distinctive portfolio of wines, including Chateau Ste. Michelle, 14 Hands, Columbia Crest, Intrinsic, Liquid Light, Northstar, and Spring Valley Vineyard, are enjoyed across the U.S. and distributed in over 100 countries.

Cybersecurity Engineer job responsibilities include:

• Manage and secure Windows servers, directory services, identity platforms, and hybrid infrastructure.
• Troubleshoot and remediate day-to-day security and infrastructure issues across servers, identity systems, and endpoints.
• Manage vulnerability identification, prioritization, remediation, and validation using common industry-leading vulnerability management platforms such as Rapid7, Tenable, Qualys, or Microsoft Defender Vulnerability Management.
• Build and maintain automated vulnerability remediation workflows across industry-leading vulnerability management, endpoint security, device management, infrastructure management, and ITSM platforms.
• Monitor and investigate security events and endpoint detections using industry-leading endpoint detection and response (EDR/XDR) and SIEM platforms such as Crowd Strike, Microsoft Defender, Sentinel One, Palo Alto Cortex XDR, Splunk, Microsoft Sentinel, or QRadar.
• Identify, investigate, and remediate security vulnerabilities, misconfigurations, and exposure risks.
• Track CVEs and emerging threats and translate findings into actionable remediation plans.
• Harden Windows systems, directory services, endpoints, and infrastructure against security threats.
• Develop automation and scripting solutions using Power Shell and other enterprise automation tools for security and infrastructure operations.
• Support identity and access management (IAM), privileged access, authentication, and identity security initiatives.
• Participate in incident response, containment, remediation, and root cause analysis.
• Audit systems and infrastructure for secure configuration and compliance with security standards.
• Partner with Infrastructure and IT teams to implement security controls and resolve vulnerabilities.
• Support security assessments, penetration testing, risk assessments, and security audits.
• Research emerging cybersecurity threats and evaluate technologies and solutions to improve the organization's security posture.
• Support SOC 2, PCI DSS 4.0, CIS, HIPAA, and other applicable security and compliance requirements.
• Support vendor security assessments and GRC activities as needed.

Position Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent experience.
• Strong hands-on experience supporting Windows Server environments, enterprise infrastructure, and hybrid cloud environments.
• Expertise in Active Directory, Entra  (Azure AD), IAM, authentication, authorization, and privileged access management.
• Experience with vulnerability…