Cybersecurity Engineer

Protect critical systems, drive cybersecurity strategy, and make a real impact in a mission-driven organization dedicated to serving communities worldwide.

FT, Direct Hire

Flexible schedule

Onsite in Westchester NY

$100-108K

Security Frameworks, SOC reports, security controls, security awareness, remediation strategies

A well-established nonprofit organization is seeking a Cyber Security Engineer to lead and strengthen its cybersecurity program. This individual will play a critical role in protecting systems, networks, and sensitive organizational data while helping foster a security-first culture across the organization.

This position offers the opportunity to work in a mission-driven environment where technology directly supports meaningful global initiatives and community impact

What You''ll Do

• Monitor, identify, and respond to cybersecurity threats and incidents
• Design and implement security controls to protect infrastructure, systems, and data
• Conduct risk assessments and recommend improvements to strengthen security posture
• Manage vulnerability remediation efforts, system patching, and security monitoring activities
• Evaluate third-party vendors and review security documentation, including SOC reports, to assess organizational risk
• Develop and deliver security awareness initiatives and end-user training programs
• Collaborate with IT teams and business stakeholders to ensure security best practices are followed across the organization
• Assist with policy development, compliance efforts, and ongoing security governance.

What We''re Looking For

• Bachelor''s degree in Information Technology, Computer Science, Cybersecurity, or a related field
• CISM certification required
• 5+ years of cybersecurity experience with responsibility for securing enterprise environments
• Strong understanding of Windows and macOS operating systems, networking concepts, firewalls, and vulnerability management
• Experience investigating security events and implementing remediation strategies
• Knowledge of information security frameworks, policies, and regulatory requirements
• Experience assessing third-party security controls and reviewing SOC reports is highly preferred
• Strong communication skills with the ability to work effectively with both technical and non-technical stakeholders