Position SummaryWe are seeking a highly motivated
Cybersecurity Engineer to join our growing cybersecurity team. This role is responsible for supporting and enhancing the organization's cybersecurity capabilities through incident response, digital forensics, threat hunting, and security technology implementation.
The ideal candidate possesses strong technical expertise in security operations and incident response while also contributing to the design, deployment, and optimization of cybersecurity solutions that strengthen the organization's overall security posture. This individual will serve as a key contributor in maturing security processes, improving defensive capabilities, and driving continuous improvement across the cybersecurity program.
Key Responsibilities Digital Forensics & Incident Response (DFIR) - Investigate cybersecurity incidents, including malware infections, unauthorized access, phishing attacks, insider threats, and potential data breaches.
- Collect, preserve, analyze, and document forensic evidence in accordance with industry best practices.
- Conduct endpoint, network, cloud, and log-based investigations.
- Perform root cause analysis and provide recommendations for remediation and prevention.
- Participate in incident response activities, including containment, eradication, recovery, and post-incident reviews.
- Develop and maintain incident response playbooks and investigation procedures.
Security Operations - Monitor, investigate, and respond to security alerts generated by security monitoring platforms and managed security services.
- Perform proactive threat hunting activities across enterprise environments.
- Analyze indicators of compromise (IOCs), indicators of attack (IOAs), and emerging threat intelligence.
- Improve detection capabilities through the creation and tuning of SIEM use cases, analytics, and alerting logic.
- Collaborate with infrastructure and application teams to remediate identified vulnerabilities and security gaps.
Security Engineering & Program Maturity - Assist in evaluating, implementing, and optimizing cybersecurity technologies and services.
- Lead or support security projects involving endpoint protection, identity security, cloud security, data protection, vulnerability management, and threat detection platforms.
- Develop security standards, procedures, and documentation.
- Conduct security assessments and provide recommendations for improving controls and reducing organizational risk.
- Support security architecture reviews and secure design initiatives.
- Identify opportunities to automate security processes and improve operational efficiency.
Collaboration & Communication - Partner with IT, infrastructure, cloud, networking, and application teams to strengthen security controls.
- Prepare technical reports, post-incident analyses, and executive summaries.
- Provide guidance and mentoring to junior security analysts and engineers.
- Participate in audits, risk assessments, and compliance initiatives as needed.
Required Qualifications - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
- 3-5 years of experience in cybersecurity, with emphasis on security operations, incident response, or security engineering.
- Experience conducting cybersecurity investigations and responding to security incidents.
- Experience supporting cloud environments.
- Experience implementing security controls within enterprise environments.
- Familiarity with NIST Cybersecurity Framework, CIS Controls, and Zero Trust principles.
- Experience with automation and orchestration platforms.
- Related certification(s) preferred
Note: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required and are not intended to be an exhaustive list of all duties, responsibilities or qualifications associated with this job.
