Cybersecurity Engineer

About the Role


We're looking for a Cybersecurity Engineer to help design, secure, monitor, and improve enterprise security operations and infrastructure. This is a hands-on role that combines security engineering, security operations, identity and access management, threat detection, and incident response.


You'll be part of a lean, highly visible cybersecurity team where you'll own critical security platforms and help strengthen the organization's overall security posture. This position requires a professional who can balance strategic security initiatives with day-to-day operational security responsibilities.


Location: Westborough, MA(Fully On-site)

What You'll Do


Identity & Access Management (Critical Ownership Area)

• Own and manage Okta administration and enterprise Single Sign-On (SSO) environments.
• Design, implement, and maintain identity lifecycle management processes.
• Manage MFA, conditional access policies, role-based access controls, and authentication security.
• Ensure secure access governance and identity protection across systems and applications.
• Lead IAM-related security improvements and compliance initiatives.

Security Operations & Incident Response

• Monitor, investigate, and respond to security alerts and incidents.
• Analyze endpoint, network, application, and identity-related security events.
• Conduct threat hunting activities and proactively identify potential threats.
• Investigate suspicious activity and document findings, root causes, and remediation actions.
• Coordinate response efforts for security incidents and vulnerabilities.

Security Engineering & Platform Administration

• Administer and improve security technologies including:
• Google Security Operations (Google SecOps/SIEM)
• ThreatLocker
• Microsoft Defender
• Firewalls
• IDS/IPS solutions
• Vulnerability Management platforms
• Secure Remote Access technologies
• Manage application whitelisting and Zero Trust security controls.
• Harden, secure, and maintain Windows and/or Linux systems.
• Perform ongoing security configuration reviews and control validation.

Vulnerability & Risk Management

• Conduct vulnerability assessments and security reviews.
• Prioritize and remediate security risks across servers, endpoints, and applications.
• Identify gaps in security controls and implement improvements.
• Support disaster recovery, business continuity, and change management initiatives.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
• 5+ years of cybersecurity, security engineering, or security operations experience.
• Experience administering and securing Windows and/or Linux environments.
• Experience with SIEM technologies and security event analysis.
• Knowledge of vulnerability management, endpoint security, firewalls, and security monitoring.
• Experience managing Identity and Access Management (IAM) platforms.
• Strong understanding of cybersecurity frameworks and security best practices.
• Excellent incident investigation, documentation, and analytical skills.

Preferred Qualifications

• Hands-on Okta administration and Single Sign-On (SSO) ownership experience.
• Experience with Google SecOps.
• Experience with ThreatLocker, application whitelisting, and Zero Trust controls.
• Experience with Microsoft Defender.
• Knowledge of CIS Controls, NIST, or similar frameworks.
• CISSP, Security+, Microsoft Security, or related security certifications.
• Experience within highly regulated environments such as banking, financial services, healthcare, or insurance.

Ideal Candidate

• Owns security platforms rather than simply supporting them.
• Has both Security Operations and Security Engineering experience.
• Understands Identity Security and IAM deeply.
• Can independently investigate threats, incidents, and system vulnerabilities.
• Comfortable working in a smaller team where visibility and accountability are high.
• Experienced with application control, endpoint security, and enterprise access management.