Cybersecurity Engineer

• The Cybersecurity Engineer III is responsible for designing, implementing, and maintaining advanced security measures to protect the organization’s information systems
• This role involves working with various security technologies, including encryption, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication
• They will have extensive knowledge of secure systems architecture, emerging technologies, threats, and regulatory requirements
• The Cybersecurity Engineer III will work closely with senior engineers and cross-functional teams to ensure the security and integrity of the organization’s information systems
• This position offers the opportunity to work on complex security projects, stay updated with the latest industry trends, and contribute to the continuous improvement of the organization’s security posture
• Support the enterprise vulnerability management program across infrastructure, endpoints, applications, cloud environments, and network devices
• Develop and maintain vulnerability scanning strategies, schedules, configurations, coverage metrics, and operating procedures
• Analyze vulnerability scan results and threat intelligence to validate findings, assess exploitability and business impact, and prioritize remediation using a risk-based approach
• Coordinate with infrastructure, application, cloud, network, and business teams to assign, track, and verify remediation activities within established service-level targets
• Provide technical guidance on remediation options, compensating controls, exception requests, and risk acceptance decisions
• Monitor vulnerability management dashboards, trends, and key performance indicators; prepare clear executive and technical reports on exposure, remediation progress, and residual risk
• Investigate discrepancies in scan coverage, vulnerability data, and remediation status to improve the accuracy and completeness of enterprise reporting
• Integrate vulnerability management processes and data with asset management, configuration management, ticketing, SIEM, GRC, and other security platforms
• Support vulnerability assessments, penetration testing, compliance assessments, and audits by providing evidence, technical analysis, and remediation status
• Develop scripts, workflows, and other automation to improve scanning, data analysis, ticket creation, reporting, and remediation verification
• Stay current on emerging vulnerabilities, exploitation trends, security advisories, and defensive technologies, and communicate relevant risks and recommended actions to stakeholders

Benefits

• Medical Coverage: We offer two comprehensive medical plans, a PPO and an HDHP, designed to prioritize the well-being of our team members
• Dental Coverage: HMO and PPO dental plans are aimed at promoting optimal oral health and reducing costs
• Vision Coverage: Our vision plan offers access to a wide range of in-network and out-of-network providers
• Flexible Spending Accounts: Maximize savings and use pre-tax dollars to pay for medical and dependent care expenses
• Health Savings Account: This tax-advantaged savings account allows team members to set aside pre-tax funds to cover qualified medical expenses
• Life and AD&D Insurance: Comprehensive Basic and Supplemental Life and Accidental Death and Dismemberment (AD&D) insurance offers financial protection to your family
• Disability Insurance: Short-term and long-term disability insurance provides wage replacement should you suffer a disability that prevents you from working
• 401K Profit Sharing Plan: Employees may contribute 1% to 100% of base salary up to the annual IRS maximum. Employer match provided with a 5-year vesting schedule
• Employee Assistance Program: Confidential service available 24/7 that provides assessment, counseling, resources and referrals to employees
• Professional Development / Educational Reimbursement Plan: Reimbursement for undergraduate and graduate tuition, books and fees.- We’re looking for team members who align with our values, mission and goals – while also meeting the minimum qualifications below. The preferred qualifications are a bonus, not a requirement
• We seek individuals who are passionate about innovating beyond boundaries and relentlessly pursuing solutions that protect, preserve and empower – to join us in this critical mission
• Typically 5+ years of related experience
• Knowledge of secure systems architecture
• Knowledge of one or more: emerging technologies, emerging threats, emerging regulatory requirements
• Certifications: (1 or more required) GIAC (Global Information Assurance Certification), network technology certifications such as a CCNP (Cisco Certified Network Professional), or SANS level 300 courses
• Requires Bachelor’s degree in a related field (or equivalent work experience in lieu of degree or Masters +3 years experience)
• Ability to obtain and maintain a U.S. security clearance
• Demonstrated experience operating or engineering an enterprise vulnerability management program across diverse technology environments
• Hands-on experience with vulnerability assessment and management platforms such as Tenable, Qualys, Rapid7, or equivalent tools
• Experience developing risk-based vulnerability prioritization methods using severity, exploitability, asset criticality, threat intelligence, and business impact
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, and third-party teams in a large or complex enterprise
• Experience with vulnerability exception management, compensating controls, risk management, remediation validation, and service-level reporting
• Proficiency with asset discovery, inventory reconciliation, scan configuration, credentialed scanning, authenticated assessment, and vulnerability data quality management
• Experience integrating vulnerability management platforms with ticketing, CMDB, SIEM, GRC, orchestration, or reporting systems
• Experience translating vulnerability data into executive-level risk reporting, dashboards, metrics, and actionable remediation plans
• Knowledge of common vulnerability scoring and prioritization standards, including CVE, CVSS, CWE, CISA KEV, and related threat intelligence sources
• Certifications such as CISSP, CISM, CISA, CCSP, GIAC, or a vulnerability-management-related certification
• Strong technical leadership, communication, analytical, project management, and mentoring skills- Application Deadline: This role will remain posted until a qualified pool of candidates is identified