Staff Cyber Security Engineer

Accountabilities

• Conduct end-to-end security and threat analysis for enterprise initiatives involving new or modified technology deployments, identifying risks and defining appropriate security requirements and mitigations.
• Partner with business stakeholders, enterprise IT, engineering teams, and cybersecurity functions to ensure security requirements are clearly understood and incorporated throughout all phases of projects.
• Provide technical security guidance across network, application, cloud, perimeter, core systems, endpoint, and other enterprise security domains, drawing on advanced expertise in at least one area.
• Evaluate technology architectures and designs against cybersecurity best practices, including frameworks and standards such as OWASP Top 10 and CWE/SANS Top 25.
• Develop, document, and communicate secure design guidelines, security controls, and recommended practices that support the organization’s desired security posture.
• Perform threat analysis and modeling using industry frameworks such as MITRE ATT&CK, where applicable, and translate findings into practical security improvements.
• Collaborate with Cyber Security, GRC, Incident Response, Engineering, and Operations teams to address complex security challenges and strengthen enterprise controls.
• Communicate the importance and value of cybersecurity programs and services to technical and non-technical audiences, building stakeholder trust, support, and buy-in.
• Use architecture and diagramming tools to clearly communicate secure designs, security controls, dependencies, and risk considerations.
• Provide mentorship and constructive feedback to team members while contributing to a culture of continuous improvement and technical excellence.
• Manage multiple concurrent initiatives effectively, prioritizing work according to business needs, risk, deadlines, and overall security impact.

Requirements

• 8+ years of experience partnering with business and technical teams to architect and deliver cybersecurity solutions, with a strong track record of translating security needs into practical technology outcomes.
• 8+ years of experience consulting with business teams on threat mitigation and security best practices across areas such as perimeter security, application security, core systems, endpoint security, and cloud environments.
• Strong understanding of common threats affecting network, cloud, web, application, and enterprise technology environments.
• Advanced technical expertise in at least one major cybersecurity domain, with the ability to navigate complex technical and security challenges.
• Strong knowledge of cybersecurity engineering and operations, incident response, governance, risk, and compliance functions.
• Experience developing and documenting security guidelines, best practices, architectures, and controls, as well as using diagramming tools to communicate secure designs.
• Familiarity with security frameworks and control sets such as MITRE ATT&CK, NIST Cybersecurity Framework, CIS Critical Security Controls, and cloud security frameworks.
• Understanding of data protection and privacy regulations and standards, including PCI DSS, SOX, HIPAA, GDPR, and CCPA.
• In-depth understanding of common IaaS, PaaS, and SaaS cloud services and the security considerations associated with them.
• Ability to balance security policies and requirements with engineering and operational realities while maintaining an appropriate enterprise security posture.
• Excellent written, verbal, and presentation skills, with the ability to communicate effectively with both technical and non-technical stakeholders.
• Strong collaboration skills, including the ability to give and receive constructive feedback and mentor colleagues across different levels of experience.
• Excellent organization and time management skills, with the ability to prioritize multiple projects and competing security initiatives.
• A formal degree is not required; relevant professional experience and demonstrated cybersecurity expertise are prioritized.

Benefits

• Salary range of $125,000–$155,000, with eligibility for a bonus.
• Fully remote work, with the position designed to be performed from a non-company worksite, typically an employee’s residence.
• Medical, dental, and vision insurance.
• 401(k) retirement plan.
• Paid leave.
• Tuition reimbursement.
• Additional employee discounts and perks.
• Opportunity to work across complex enterprise security, cloud, application, network, and technology environments.
• Broad collaboration with business, engineering, IT, cybersecurity, operations, and governance teams.
• Opportunity to contribute to security architecture, threat analysis, enterprise security strategy, and technical mentorship.