Cybersecurity Engineer

Cybersecurity Engineer

The Cybersecurity Engineer owns the day-to-day security operations of the organization's fully cloud-based technology environment. This is the company's dedicated security role, and it operates with a high degree of independence: the incumbent drafts and sets the approved operational security agenda, oversees external MDR, drives vulnerability and access remediation with system owners, and carries the organization through external audit. Because the scope is broad by design, the role is structured to scale through leverage — directing managed security service providers and specialist vendors for around-the-clock monitoring and surge capacity, while retaining ownership of strategy, configuration, escalation, and outcomes in-house.

The successful candidate is equally comfortable investigating an alert at the console and explaining residual risk to business leadership. This is a high-visibility role with a direct line to decisions about how the organization protects its data, its residents' information, and its capital.

Key Responsibilities:

• Threat Detection & Incident Response
• Security Monitoring, SIEM & Reporting
• Vulnerability & Configuration Management
• Identity & Privileged Access Governance
• Cloud & DevOps Security
• Data Protection, Compliance & eDiscovery
• Security Awareness & Human Risk
• Vendor & Managed Service Oversight

Qualifications:

Required:

• 4+ years of hands-on experience in cybersecurity operations, security engineering, or a security-focused systems administration role, in a predominantly cloud environment
• Demonstrated experience with security monitoring and SIEM platforms, including detection tuning and investigation of real alerts through to disposition
• Practical experience with endpoint detection and response and cloud-native security tooling across identity, endpoint, email, and cloud workloads
• Working knowledge of cloud identity security, including conditional access, multifactor authentication, and privileged access management concepts
• Experience running a vulnerability management program, including prioritization and driving remediation through other teams
• Direct participation in a recognized audit or compliance program such as SOC 2, ISO 27001, or NIST Cybersecurity Framework, including evidence collection
• Ability to lead an incident calmly under pressure and to document what happened clearly afterward
• Strong written communication: policies, runbooks, findings, and executive-level summaries
• Sound judgment about what to escalate and what to handle independently, with the discretion the role requires

Preferred:

• Experience administering a cloud data governance and compliance platform, including data loss prevention and eDiscovery
• Experience integrating security controls into CI/CD pipelines and infrastructure-as-code workflows
• Experience managing or holding a managed security service provider accountable to service levels
• Scripting or automation capability for reporting, evidence collection, and repetitive response tasks
• Experience administering a security awareness and simulated phishing platform
• Familiarity with secure access service edge or zero-trust network access technologies
• Exposure to real estate, construction, property management, or another multi-site operating environment
• Relevant certifications such as CISSP, CISM, GIAC, CCSP, or vendor-specific cloud security certifications; certification is valued but does not substitute for demonstrated hands-on capability

Work Environment:

• This is a fully cloud-based environment. Incumbents primarily work in an office setting with occasional travel between office locations required. The role requires availability outside standard business hours for security incidents, and as the primary on-call escalation. Occasional extended hours may be needed to support audit deadlines, remediation windows, or critical incidents.