Cybersecurity Engineer II

Nasco - Boston, MA

Full-time - Mid Level

Remote - Boston, MA

Fabricated Metal Product Manufacturing

About the position

As a Cybersecurity Engineer II at NASCO, you will provide engineering support and consult on security-related matters for enterprise products, information systems, and network architectures. This role emphasizes compliance with security policies and procedures, recommending secure best practices throughout the product lifecycle. You will protect against unauthorized access, modification, or destruction of systems or data, and demonstrate the importance of integrating security requirements into the systems engineering process and software development lifecycle.

Responsibilities

• Provides daily, ongoing security oversight of assigned moderately complex systems, including the security impact of proposed modifications, additions, and technology refresh evolutions
• Works within a team to develop customized technical solutions to unique problems while adhering to security policies, procedures, standards and best practices
• Develops creative technical and procedural solutions to effectively secure information systems without introducing significant operational overhead
• Aids in the development of architectural designs, and reviews new product implementations
• Assists with troubleshooting and performs research to identify the cause of issues and identify potential solutions
• Provides mitigation recommendations to reduce identified security risks
• Establishes and enforces security best practices, protection objectives, process improvements and effective security controls with associates and customers
• Assists in security incident response and documentation
• Assesses the overall security risks to the system by understanding system security vulnerabilities and associated threats
• Analyzes impact of software installations, configurations and infrastructure modifications to minimize system downtime when recommending security remediation's
• Assists in mentoring junior team members on security operations processes and procedures
• Advises associates of the security features and procedures used in their products and systems
• Performs regularly scheduled security reviews (e.g., technology, operations and personnel)
• Participates in annual reviews of policies, procedures and security controls in support of security framework assessments

Requirements

• 8 years of experience in Information Security
• 5 years of experience implementing and enforcing security directives, policies, publications and regulations
• 5 years of experience with software and security architectures and has a clear understanding of security protocols and standards
• 3 years of experience in networking concepts and services
• 5 years of experience with IT system, local and wide-area network administration, telecommunications, and/or security protection technologies including multi-factor authentication and single sign-on technologies
• 5 years of experience conducting risk assessment work, IT auditing of compliance requirements, or framework gap analysis
• 5 years of experience with multiple cloud provider security standards and cloud administration capabilities
• Bachelor's degree in computer science, information systems, engineering, business administration or a related field; experience can be substituted

Benefits

• Choice of Blue Cross Blue Shield Medical, Dental, and Vision Plans
• Telehealthcare - for Medical and Behavioral visits
• Generous PTO with buy/sell options
• 9 Company holidays, a floating day off, and a day off for volunteering
• Employee Assistance Program
• Wellness program - earn insurance discounts or credit towards health-related items
• 401K Plan with employer matching contributions
• Company-funded spending/reimbursement accounts to help with out-of-pocket medical expenses
• Bonus and Recognition programs
• Tuition Assistance
• Consultation with financial planner
• Basic Life & AD&D Insurance, Short and Long-Term Disability Insurance provided, and Supplemental Term Life Insurance is available
• Group Discount programs - mobile, technology services, etc., to help you save money
• E-Learning - Comprehensive and current library of e-learning and performance support assets, available on demand and at no cost