Cybersecurity Engineer

$116,719 - $157,114/Yr

CUTSFORTH PRODUCTS INC - Ferndale, WA

Full-time - Mid Level

Remote - Ferndale, WA

About the position

The Cybersecurity Engineer role at Cutsforth is focused on enhancing the company's cybersecurity practices by implementing advanced security controls and minimizing the attack surface. The position involves driving vulnerability remediation, conducting security architecture reviews, and leading the development of governance processes, including the documentation of cybersecurity policies and procedures. This fully remote, full-time position requires a strong technical background in cybersecurity and a commitment to maintaining a secure work environment.

Responsibilities

• Implement, manage, and monitor security measures to protect Cutsforth's networks, systems, products, and data.
• Reduce attack surface and implement secure configurations for systems and applications (hardening).
• Support implementation of security improvement projects such as browser and system hardening, DLP controls, USB encryption, etc.
• Drive improvement of and participate in security incident analysis and response.
• Perform security reviews of new products and vendors to ensure processes are achieving business objectives while minimizing new risks.
• Lead the Cybersecurity team's efforts in the documentation of cybersecurity policies and procedures.
• Drive maturity across a wide array of technical and governance processes as Cutsforth aligns with industry security frameworks, such as NIST SP800-53.
• Support contract review to ensure Cutsforth's capabilities align with customer requirements.

Requirements

• 5+ years' of experience in technical security roles including vulnerability management and security control testing or implementation in an enterprise environment.
• 3+ years of experience performing security governance and risk management responsibilities that included some form of technical writing.

Nice-to-haves

• Bachelor's degree in cybersecurity or relevant technology program is preferred.
• CISSP, CySA+, or similar industry certifications are preferred.
• Experience in performing security review and administration activities in Microsoft environments is preferred (Microsoft Security and Compliance center, etc.).
• Familiar with concepts of the Cyber Kill chain/MITRE ATTACK and mitigating techniques.
• Strong self-learning skills and problem-solving capabilities with attention to detail.
• Adept technical writing and research capabilities.

Benefits

• Medical, Vision, Dental Insurance
• Health Savings Account with Employer contributions
• 401(k) with Employer match
• Short-term & Long-term Disability Coverage
• Accidental Death & Dismemberment Coverage
• Life Insurance Coverage
• 80 hours of Paid-Time-Off annually
• Eight paid holidays per year