Job Summary:The Cybersecurity Engineer serves as the primary cybersecurity resource for the i3 Broadband and is responsible for advancing the security of the organization's infrastructure, systems, applications, endpoints, identities, and data. Reporting to the IT Infrastructure Manager, this position balances cybersecurity program coordination with hands-on technical execution.
This role identifies and evaluates cyber risk, recommends practical security improvements, coordinates remediation with responsible departments, and works directly with Infrastructure and other technology teams to implement security controls. This position is expected to spend most of its time performing hands-on cybersecurity engineering, monitoring, vulnerability management, security administration, incident response, and remediation activities while supporting cybersecurity program objectives. As the organization continues to mature its cybersecurity program, this role will have the opportunity to contribute to the evolution of security processes, technologies, and resources.
The Cybersecurity Engineer partners with Infrastructure, Network Engineering, Software Engineering, Helpdesk, application owners, business stakeholders, managed security providers, and vendors to improve security visibility, reduce risk, and strengthen incident preparedness.
Key Responsibilities:Cybersecurity Leadership & Governance:
- Serve as the organization's cybersecurity engineering resource and provide guidance to Information Technology leadership and stakeholders.
- Identify cybersecurity risks, recommend priorities, and translate technical findings into clear business impact, remediation options, and practical next steps.
- Develop, maintain, and improve cybersecurity policies, standards, procedures, technical guidance, and program documentation.
- Collaborate with cybersecurity initiatives across Infrastructure, Network Engineering, Software Engineering, Helpdesk, application owners, business departments, and third-party partners.
- Support the continued development of the cybersecurity program through participation in process improvement, reporting, metrics development, and security initiatives.
Security Operations & Incident Response:
- Monitor security tools, alerts, logs, threat intelligence, and managed security service notifications; investigate and validate suspicious activity.
- Coordinate and perform incident response activities, including detection, containment, eradication, recovery, escalation, documentation, and post-incident review.
- Maintain incident records, response procedures, communication paths, and lessons learned.
- Participate in an on-call rotation or provide after-hours support for significant cybersecurity incidents and planned security changes as needed.
Vulnerability & Risk Management:
- Administer or support vulnerability scanning and assessment platforms and maintain an accurate view of identified vulnerabilities and exposures.
- Review, validate, prioritize, and communicate vulnerabilities based on technical severity, business impact, exploitability, and operational context.
- Coordinate remediation with infrastructure, network, application, software, and vendor owners; validate completed remediation and track exceptions or accepted risks.
- Support external security assessments, penetration tests, public exposure monitoring, and remediation planning.
Security Engineering, Identity & Access:
- Assess systems, endpoints, identities, cloud services, and infrastructure for security gaps, unsupported configurations, and control weaknesses.
- Partner with Infrastructure to advise on, configure, test, and implement security improvements involving Microsoft Intune, Microsoft Entra, Fortinet firewalls and VPN services, endpoint protection, identity controls, and related technologies.
- Support multi-factor authentication, conditional access, privileged access, administrative account hygiene, access reviews, and least-privilege initiatives.
- Develop and validate security configuration standards and harden baselines for supported technologies.
- Improve security logging, alerting, endpoint visibility, and monitoring coverage across the environment.
- Provide secure configuration guidance and practical implementation support to technical teams.
Compliance, Audit & Security Awareness:
- Support cybersecurity, privacy, CPNI, audit, contractual, and regulatory activities through evidence collection, control documentation, remediation tracking, and technical subject-matter support.
- Assist with cybersecurity questionnaires, risk assessments, vendor security reviews, and due-diligence requests.
- Coordinate security awareness activities, phishing simulations, and user education in collaboration with appropriate stakeholders.
- Maintain clear, accurate, and auditable records of security changes, exceptions, incidents, assessments, and remediation activities.
- Support business continuity and disaster recovery planning, exercises, and improvement activities.
*Perform other duties as assigned.
Qualifications:Education and Experience:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Network Engineering, or a related field required.
- 3 to 5+ years of progressively responsible experience in cybersecurity, network operations, infrastructure administration, systems administration, IT support, SOC operations, or a related technical role, preferably in a telecom environment.
- Demonstrated hands-on experience in one or more of the following areas: vulnerability management, security monitoring, incident response, identity and access management, endpoint security, firewall or VPN security, or systems administration.
- Industry certifications such as CompTIA Security+ or CySA+, Microsoft security certifications, Fortinet certifications, or comparable credentials are valued.
- Demonstrated commitment to ongoing technical learning and professional development in cybersecurity.
- Telecommunications, broadband, ISP, infrastructure-intensive, or other 24x7 operational experience preferred.
Skills and Competencies:
- Practical knowledge of cybersecurity principles, common threats, security controls, networking, identity, endpoints, and enterprise infrastructure.
- Ability to investigate technical findings, evaluate risk, identify root causes, and drive issues through remediation.
- Ability to balance hands-on implementation with coordination, documentation, reporting, and advisory responsibilities.
- Experience working collaboratively with infrastructure and network teams to implement security configuration and access-control changes.
- Strong written and verbal communication skills, including the ability to explain technical risk to non-technical audiences.
- Strong problem-solving skills, attention to detail, sound judgment, and ability to manage multiple priorities.
- Ability to work independently while building effective relationships across technical and business teams.
- Demonstrated commitment to continuous learning and keeping current with evolving cybersecurity threats, technologies, and practices.
Working Conditions:
- Ability to communicate effectively orally and in writing and operate standard office technology and equipment.
- Ability to travel to company locations and vendor sites as business needs require.
- Requires prolonged periods of sitting at a desk and working on a computer workstation.
- Frequent use of hands and fingers for typing, data entry, writing, and operating standard office equipment.
- Must be able to maintain visual focus on screens, documents, and written materials for extended periods.
- Requires clear verbal and written communication in person, by phone, and through electronic means.
- Occasional standing, walking, bending, reaching, or lifting of light office supplies and materials, typically up to 10-20 lbs.
- Must be able to perform repetitive tasks with accuracy, consistency, and attention to detail.
- Work is primarily performed in a standard office environment, with occasional after-hours support for security incidents or planned changes.
