Cybersecurity Engineer

Hyliion - Cedar Park, TX

Full-time - Mid Level

Cedar Park, TX

Transportation Equipment Manufacturing

About the position

Hyliion is committed to creating innovative solutions that enable clean, flexible, and affordable electricity production. The Company's primary focus is to develop distributed power generators that can operate on various fuel sources to future-proof against an ever-changing energy economy. Hyliion is looking for an experienced cybersecurity expert to manage our security and compliance requirements. As a key member of the IT Security and Compliance function, you will help drive the direction and have an impact from day one. You will ensure compliance with our regulatory obligations and drive continual improvement in our risk and cyber-security efforts. In this role, you will perform in-depth security risk assessments and audits, both in-house and with external parties, establishing IT security audit frameworks. You will lead our comprehensive security strategy, ensuring robust data protection, risk management, and adherence to product security standards. Your responsibilities will include quickly addressing and resolving cybersecurity incidents, ensuring all privacy and legal obligations are met. You will simplify complex security data into actionable reports for decision-makers, regulatory bodies, and stakeholders, enhancing transparency and understanding of our cybersecurity efforts. Additionally, you will enhance our cybersecurity operations by identifying improvement areas, standardizing processes, and integrating cutting-edge security tools. Collaboration with business leaders will be essential to address and mitigate information security risks, ensuring timely and effective solution implementation. You will spearhead the management of risk and compliance issues, facilitating a coordinated response across all levels of the organization. Engaging with key stakeholders in the development of contingency plans, business continuity strategies, and disaster recovery efforts will be crucial to ensuring our organization's resilience. You will also develop and maintain a centralized dashboard for leadership, providing a clear and concise overview of cybersecurity risks and statuses across the organization. Furthermore, you will integrate CMMC 2.0 standards into our security practices, elevating our commitment to protecting controlled unclassified information within the defense supply chain and leading the charge in achieving and maintaining CMMC 2.0 certification, ensuring compliance with Department of Defense requirements and enhancing our competitive edge.

Responsibilities

• Perform in-depth security risk assessments and audits, both in-house and with external parties, establishing IT security audit frameworks.
• Lead our comprehensive security strategy, ensuring robust data protection, risk management, and adherence to product security standards.
• Quickly address and resolve cybersecurity incidents, ensuring all privacy and legal obligations are met.
• Simplify complex security data into actionable reports for decision-makers, regulatory bodies, and stakeholders, enhancing transparency and understanding of our cybersecurity efforts.
• Enhance our cybersecurity operations by identifying improvement areas, standardizing processes, and integrating cutting-edge security tools.
• Collaborate closely with business leaders to address and mitigate information security risks, ensuring timely and effective solution implementation.
• Spearhead the management of risk and compliance issues, facilitating a coordinated response across all levels of the organization.
• Engage with key stakeholders in the development of contingency plans, business continuity strategies, and disaster recovery efforts, ensuring our organization's resilience.
• Develop and maintain a centralized dashboard for leadership, providing a clear and concise overview of cybersecurity risks and statuses across the organization.
• Integrate CMMC 2.0 standards into our security practices, elevating our commitment to protecting controlled unclassified information within the defense supply chain.
• Lead the charge in achieving and maintaining CMMC 2.0 certification, ensuring compliance with Department of Defense requirements and enhancing our competitive edge.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or related field.
• 6+ years of IT experience with a focus on cyber security and compliance.
• Knowledge and experience with legal, privacy, and regulatory compliance standards such as NIST-800, SOC, GDPR, SOX, etc.
• CISSP, CISM, or other relevant security certifications.
• The ability to work in a fast-paced environment and the skills to deal with ambiguity.
• Experience in Microsoft Azure cloud infrastructure and security stack.
• Experience in scoping and implementing NIST-800 or similar security framework.
• Experience coordinating tasks to complete third party assessments.
• Knowledgeable in writing policies, procedures, and controls in one or more standards/frameworks.
• Experience with Risk Management in both a compliance and security context.
• Ability to handle multiple competing priorities.
• Ability to work well under minimal supervision.

Nice-to-haves

• Experience securing the public cloud (Azure, preferred).

Benefits

• Medical Plans, with PPO or HDHP options
• Dental Plans, with buy-up option
• Vision Plan
• Life Insurance and Accidental Death & Dismemberment Plans, with buy-up options
• Short Term Disability, paid for by the company
• Long Term Disability, paid for by the company
• Flexible Spending Accounts (FSA)
• Health Savings Account (HSA)
• 401k/Roth 401k
• Voluntary Accident Plans
• Voluntary Critical Illness Plans
• Hospital Indemnity Plan