Cybersecurity Engineer III

Position: Cybersecurity Engineer III
Location: Remote
Term: Full Time

About Role

Purpose of the Position

The Cybersecurity Engineer is responsible for implementing, managing, and enhancing security systems to strengthen the organization's ability to identify, detect, respond to, and recover from cyber threats. This role requires a strong infrastructure and cloud background, with the ability to apply holistic security principles across Windows, network, and AWS environments.

We are looking for someone who is a self-starter, takes initiative, and thrives in a small-team environment where ownership and accountability are key. You will collaborate with a small, agile team (2 members currently), contributing both as an individual and as a cross-functional partner. This role is ideal for someone who has grown from systems or network engineering into security and can balance security engineering with operations/incident response.

Key Responsibilities

• Ensure security of systems, networks, and information assets across Windows, cloud, and hybrid environments.

• Implement and manage security controls across multiple environments, including infrastructure, cloud, and application layers.

• Develop and enforce security guidelines, standards, and strategies.

• Conduct audits, risk assessments, and compliance checks (PCI, SOC II preferred).

• Migrate non-compliant environments into compliant states.

• Manage and monitor security systems, including SIEM (Datadog preferred), DLP, IDS/IPS, and endpoint solutions.

• Implement security hardening, monitoring, incident response, and disaster recovery processes.

• Operate and tune AWS security tools including, but not limited to:
  IAM, KMS, CloudTrail, Config, Security Hub, GuardDuty, Inspector, WAF, Shield, Secrets Manager, Certificate Manager, Organizations, Control Tower, Macie, SSO, Firewall Manager, Trusted Advisor, VPC security groups/NACLs, Service Catalog, and Audit Manager.

• Ensure Infrastructure as Code (IaC) security practices using Terraform and related tools.

• Investigate, respond to, and mitigate cyber incidents including malware, phishing, vulnerabilities, and network intrusions.

• Train and educate staff on security best practices and awareness.

• Contribute to projects in both independent and collaborative settings.

• Take initiative in identifying security gaps, recommending solutions, and leading implementations.

• Support and backfill responsibilities within the team as needed.

Required Qualifications

• Education & Experience:

  • 8+ years of cybersecurity or IT experience OR a 4-year US-accredited degree in Cybersecurity, Computer Science, or related field plus 4+ years of experience.

  • Demonstrated progressive career path with security engineering responsibilities across at least 2-3 environments.

  • Hands-on infrastructure background (Windows Server administration, networking, and cloud engineering).

  • Strong AWS knowledge and at least 2 active AWS certifications. Must be able to explain functions and use cases of AWS security tools listed above.

  • Experience with Terraform/IaC security practices.

  • SIEM experience (Datadog strongly preferred).

  • Proven incident response and operations experience in addition to engineering.

  • Familiarity with OWASP principles and common vulnerabilities (e.g., XSS injections) with knowledge of how to mitigate them.

• Certifications (Required): Minimum of 3 relevant cybersecurity certifications. Examples include:
  CISSP, CISM, CEH, Security+, AWS Security Specialty, CCSP, GCIH, GCIA, etc.

Preferred Qualifications

• Experience working in smaller companies or teams, with the ability to take a holistic approach to security rather than operating in silos.

• Knowledge of DLP and SD-WAN technologies.

• Compliance and audit background (PCI, SOC II).

• Master's degree in Cybersecurity, Computer Science, or related field.

Skills & Abilities

• Takes initiative and demonstrates a self-starter mindset, with the ability to identify problems and drive solutions without waiting for direction.

• Strong critical thinking and problem-solving abilities.

• Deep knowledge of operating system, database, and network security.

• Proficiency with security protocols, firewalls, intrusion detection, and endpoint solutions.

• Strong documentation skills (requirements, data flows, diagrams).

• Ability to prioritize, manage multiple projects, and work autonomously in a fast-paced environment.

• Excellent communication skills with the ability to explain complex technical concepts to non-technical audiences.

• Strong interpersonal skills with a balance of assertiveness, diplomacy, and adaptability.

Additional Requirements

• Must be legally authorized to work in the U.S. without sponsorship now or in the future.

• All offers are contingent upon satisfactory background check, drug screening, and signing a confidentiality agreement.

• Federal standards for controlled substances apply.

• Occasional travel required.