Location: Westborough, MA
Salary: $75,000.00 USD Annually - $135,000.00 USD Annually
Description: About the Role We're looking for a Cybersecurity Engineer to help design, secure, monitor, and improve enterprise security operations and infrastructure. This is a hands-on role that combines security engineering, security operations, identity and access management, threat detection, and incident response.
You'll be part of a lean, highly visible cybersecurity team where you'll own critical security platforms and help strengthen the organization's overall security posture. This position requires a professional who can balance strategic security initiatives with day-to-day operational security responsibilities.
Location: Westborough, MA(Fully On-site)
What You'll Do Identity & Access Management (Critical Ownership Area) - Own and manage Okta administration and enterprise Single Sign-On (SSO) environments.
- Design, implement, and maintain identity lifecycle management processes.
- Manage MFA, conditional access policies, role-based access controls, and authentication security.
- Ensure secure access governance and identity protection across systems and applications.
- Lead IAM-related security improvements and compliance initiatives.
Security Operations & Incident Response - Monitor, investigate, and respond to security alerts and incidents.
- Analyze endpoint, network, application, and identity-related security events.
- Conduct threat hunting activities and proactively identify potential threats.
- Investigate suspicious activity and document findings, root causes, and remediation actions.
- Coordinate response efforts for security incidents and vulnerabilities.
Security Engineering & Platform Administration - Administer and improve security technologies including:
- Google Security Operations (Google SecOps/SIEM)
- ThreatLocker
- Microsoft Defender
- Firewalls
- IDS/IPS solutions
- Vulnerability Management platforms
- Secure Remote Access technologies
- Manage application listing and Zero Trust security controls.
- Harden, secure, and maintain Windows and/or Linux systems.
- Perform ongoing security configuration reviews and control validation.
Vulnerability & Risk Management - Conduct vulnerability assessments and security reviews.
- Prioritize and remediate security risks across servers, endpoints, and applications.
- Identify gaps in security controls and implement improvements.
- Support disaster recovery, business continuity, and change management initiatives.
Minimum Qualifications - Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
- 5+ years of cybersecurity, security engineering, or security operations experience.
- Experience administering and securing Windows and/or Linux environments.
- Experience with SIEM technologies and security event analysis.
- Knowledge of vulnerability management, endpoint security, firewalls, and security monitoring.
- Experience managing Identity and Access Management (IAM) platforms.
- Strong understanding of cybersecurity frameworks and security best practices.
- Excellent incident investigation, documentation, and analytical skills.
Preferred Qualifications - Hands-on Okta administration and Single Sign-On (SSO) ownership experience.
- Experience with Google SecOps.
- Experience with ThreatLocker, application listing, and Zero Trust controls.
- Experience with Microsoft Defender.
- Knowledge of CIS Controls, NIST, or similar frameworks.
- CISSP, Security+, Microsoft Security, or related security certifications.
- Experience within highly regulated environments such as banking, financial services, healthcare, or insurance.
Ideal Candidate - Owns security platforms rather than simply supporting them.
- Has both Security Operations and Security Engineering experience.
- Understands Identity Security and IAM deeply.
- Can independently investigate threats, incidents, and system vulnerabilities.
- Comfortable working in a smaller team where visibility and accountability are high.
- Experienced with application control, endpoint security, and enterprise access management.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.
Contact: This job and many more are available through The Judge Group. Please apply with us today! 
