Cybersecurity Engineer

$116,719 - $157,114/Yr

Cutsforth - New London, NC

Full-time

Remote - New London, NC

Merchant Wholesalers, Durable Goods

About the position

The Cybersecurity Engineer role at Cutsforth is focused on enhancing the company's cybersecurity practices by implementing robust security controls and reducing vulnerabilities. The position involves driving vulnerability remediation, conducting security architecture reviews, and maturing governance processes through documentation of policies and procedures. This fully remote position requires a proactive approach to managing security measures and ensuring compliance with industry standards.

Responsibilities

• Implement, manage, and monitor security measures to protect Cutsforth's networks, systems, products, and data.
• Reduce attack surface and implement secure configurations for systems and applications (hardening).
• Support implementation of security improvement projects such as browser and system hardening, DLP controls, USB encryption, etc.
• Drive improvement of and participate in security incident analysis and response.
• Perform security reviews of new products and vendors to ensure processes are achieving business objectives while minimizing new risks.
• Lead the Cybersecurity team's efforts in the documentation of cybersecurity policies and procedures.
• Drive maturity across a wide array of technical and governance processes as Cutsforth aligns with industry security frameworks, such as NIST SP800-53.
• Support contract review to ensure Cutsforth's capabilities align with customer requirements.

Requirements

• 5+ years' of experience in technical security roles including vulnerability management and security control testing or implementation in an enterprise environment.
• 3+ years of experience performing security governance and risk management responsibilities that included some form of technical writing.

Nice-to-haves

• Bachelor's degree in cybersecurity or relevant technology program is preferred.
• CISSP, CySA+, or similar industry certifications are preferred.
• Experience in performing security review and administration activities in Microsoft environments is preferred (Microsoft Security and Compliance center, etc.).
• Familiar with concepts of the Cyber Kill chain/MITRE ATTACK and mitigating techniques.
• Strong self-learning skills and problem-solving capabilities with attention to detail.
• Adept technical writing and research capabilities.