Cybersecurity Engineer

Join our team as a Cybersecurity Engineer III, where you will be responsible for designing, implementing, and maintaining advanced security measures to protect our organization's information systems. You will work with various security technologies, have extensive knowledge of secure systems architecture, and collaborate with senior engineers and cross-functional teams. This position offers the opportunity to work on complex security projects, stay updated with the latest industry trends, and contribute to the continuous improvement of our security posture.

• Designing, implementing, and maintaining advanced security measures to protect the organization's information systems.
• Supporting the enterprise vulnerability management program across infrastructure, endpoints, applications, cloud environments, and network devices.
• Coordinating with infrastructure, application, cloud, network, and business teams to assign, track, and verify remediation activities within established service-level targets.

• We’re looking for team members who align with our values, mission and goals – while also meeting the minimum qualifications below. The preferred qualifications are a bonus, not a requirement
• We seek individuals who are passionate about innovating beyond boundaries and relentlessly pursuing solutions that protect, preserve and empower – to join us in this critical mission
• Typically 5+ years of related experience
• Knowledge of secure systems architecture
• Knowledge of one or more: emerging technologies, emerging threats, emerging regulatory requirements
• Certifications: (1 or more required) GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 300 courses
• Requires Bachelor's degree in a related field (or equivalent work experience in lieu of degree or Masters +3 years experience)
• Ability to obtain and maintain a U.S. security clearance
• Demonstrated experience operating or engineering an enterprise vulnerability management program across diverse technology environments
• Hands-on experience with vulnerability assessment and management platforms such as Tenable, Qualys, Rapid7, or equivalent tools
• Experience developing risk-based vulnerability prioritization methods using severity, exploitability, asset criticality, threat intelligence, and business impact
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, and third-party teams in a large or complex enterprise
• Experience with vulnerability exception management, compensating controls, risk management, remediation validation, and service-level reporting
• Proficiency with asset discovery, inventory reconciliation, scan configuration, credentialed scanning, authenticated assessment, and vulnerability data quality management
• Experience integrating vulnerability management platforms with ticketing, CMDB, SIEM, GRC, orchestration, or reporting systems
• Experience translating vulnerability data into executive-level risk reporting, dashboards, metrics, and actionable remediation plans
• Knowledge of common vulnerability scoring and prioritization standards, including CVE, CVSS, CWE, CISA KEV, and related threat intelligence sources
• Certifications such as CISSP, CISM, CISA, CCSP, GIAC, or a vulnerability-management-related certification
• Strong technical leadership, communication, analytical, project management, and mentoring skills