Senior Cybersecurity Engineer

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Lead the investigation and containment of phishing incidents, account compromises, and threats to endpoints and networks.

• Monitor, triage alerts, and investigate unusual identity and email activities.

• Conduct rapid response actions such as disabling accounts, revoking sessions, and blocking indicators.

• Document root causes and remediation efforts for leadership and auditors.

• Develop and refine detection mechanisms and response playbooks for emerging threats, including those driven by AI.

• Coordinate major incident responses alongside IT, Legal, and external response partners.

• Enhance preparedness through tabletop exercises and post-incident reviews.

• Perform forensic evidence collection and support legal holds and eDiscovery processes.

• Participate in an on-call rotation.

• Design and engineer cybersecurity solutions across various domains, including endpoints, networks, identity, email, cloud, applications, data, AI systems, and infrastructure.

• Apply secure-by-design principles through threat modeling and architecture assessments.

• Maintain cybersecurity standards, reference architectures, and hardened baselines.

• Design and manage identity and access controls.

• Secure cloud and hybrid infrastructures through configuration standards, posture management, and guardrails.

• Automate and codify cybersecurity controls, deployments, and workflows.

• Validate and release controls via testing, staged rollouts, and change management.

• Operate cybersecurity platforms to ensure resilience, coverage, and telemetry quality.

• Evaluate and integrate new technologies through proofs of concept.

• Drive the reduction of vulnerabilities and exposures in collaboration with infrastructure, cloud, and application owners.

• Assess AI and software vendors for risks related to cybersecurity, data protection, and governance.

• Provide technical evidence and insights for audits, framework maturity reviews, cybersecurity standards, and penetration-test remediation.

• Manage relationships with cybersecurity vendors, including renewals, service retainers, and roadmap contributions.

⛳️ Requirements

• 5–8+ years of experience in cybersecurity engineering, operations, or incident response.

• Bachelor's degree in a relevant field, or equivalent professional experience.

• Hands-on experience in engineering, securing, and administering enterprise technologies, including endpoints, networks, identity, cloud, email, and applications.

• Proven incident response experience.

• Familiarity with frameworks such as NIST CSF, CIS, or ISO 27001.

• One or more certifications like CISSP, CISM, GIAC, or Security+.

• Ability to exercise sound judgment under pressure.

• Clear communication skills, capable of addressing both technical and non-technical audiences.

• Discretion in handling confidential information.

• A collaborative mindset for influencing without formal authority.

• A curiosity to stay updated on emerging technologies and threats.

• Experience in securing AI systems or knowledge of AI governance frameworks such as the NIST AI Risk Management Framework.

• Skills in scripting, automation, and infrastructure-as-code, particularly with Python.

• Experience in cloud security across major cloud platforms.

• Background in digital forensics and eDiscovery.

• Experience in threat hunting and assessing third-party risks.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Paid time off.

• Holiday pay.

• Early access to 50% of earned wages through the myFlexPay program.