Cybersecurity Engineer

Skills

About the Role

You will implement, operate, and continuously improve security controls across cloud infrastructure, corporate IT, endpoints, identities, and applications. You will manage vulnerability remediation, identity and access controls, security monitoring, incident response, application security, compliance evidence, and security improvement initiatives.

Requirements

• 5+ years of hands-on IT security or cybersecurity engineering experience
• Experience securing AWS or Azure cloud infrastructure, endpoints, and corporate IT environments
• Experience with EDR, SIEM, vulnerability management, IAM, MFA, and privileged-access controls
• Experience investigating, responding to, and remediating security incidents
• Knowledge of network security, operating-system hardening, and security automation
• Experience implementing security controls in financial services, fintech, or another regulated environment
• Experience with DevSecOps, application security, API security, mobile security, and CI/CD pipelines
• Familiarity with ISO 27001, PCI DSS, SOC 2, and financial-services regulatory requirements
• Experience with MDM, BYOD security, and cloud security posture management
• Scripting and automation skills using Python, PowerShell, or equivalent

Responsibilities

• Implement and maintain security controls across AWS or Azure, corporate IT, endpoints, and mobile devices
• Manage endpoint protection, device security, hardening, and secure configurations
• Implement cloud security controls for IAM, networking, encryption, secrets management, and logging
• Identify and remediate security misconfigurations and infrastructure risks
• Conduct vulnerability scanning, prioritize findings, and drive remediation to closure
• Coordinate patch management and remediation of penetration-testing findings
• Implement and maintain IAM, MFA, privileged-access management, and access controls
• Conduct access reviews and remediate inappropriate privileges
• Operate and improve security monitoring across SIEM, MDR, EDR, and cloud platforms
• Investigate security alerts and execute containment, remediation, and recovery activities
• Maintain detection rules, response playbooks, and operational procedures
• Implement security controls in CI/CD pipelines, including SAST, SCA, secrets, and container scanning
• Work with Engineering and DevOps to remediate application, API, and infrastructure vulnerabilities
• Maintain security documentation, control evidence, and audit trails
• Support regulatory examinations, audits, and security assessments