Cyber Security Engineer

POSITION SUMMARY:

The Cybersecurity Engineer is responsible for supporting cyber defense operations through tiered response, tool-agnostic analysis, AI-enabled workflows, and contributions to cyber resiliency and exposure management. This role addresses more challenging Tier‑2 ticket resolutions elevated from Cybersecurity Threat Analysts and designs and implements detections, automations, and controls spanning multiple platforms. Engineers co-lead threat hunting, exposure reduction campaigns, and engineer workstreams.

WORK ENVIRONMENT AND TRAVEL REQUIREMENTS:

This position is: Onsite/Hybrid (3 - 4 days/wk onsite)

Travel requirements: Up to 25% travel 

ESSENTIAL FUNCTIONS: 

•    Perform ticket queue management assigning tickets to appropriate personnel and ensuring proper triage, investigation, remediation and documentation of corrective actions are in company ticketing systems. 
•    Serve as co-lead for complex cybersecurity investigations / activities.
•    Operate as functional owner of a major security control area, security tool module.
•    Administer and tune security platforms; performing daily checks to verify appropriate connections are functioning as designed and policies are set in place.
•    Translate threat intel and TTPs (MITRE ATT&CK) into actionable detections and hardening guidance (MITRE D3FEND).
•    Build advanced detections/analytics and automation for response enrichment.
•    Produce advanced metrics and executive‑ready reports.
•    Support cyber defense operations across detection, prevention, protection, response, and remediation functions.
•    Utilize AI-assisted analysis and automation to improve accuracy and efficiency of investigations, verifying content for accuracy.
•    Support exposure management activities including vulnerability analysis and risk-based prioritization.
•    Document actions, findings, and recommendations in accordance with policy.
•    Maintain awareness of emerging threats, vulnerabilities, and adversary techniques.
•    Mentor Cyber Threat Analysts.

KNOWLEDGE, SKILLS & ABILITIES: 

•    Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience. Master’s degree a plus.
•    Experience: 3–5+ years in security operations, incident response, cybersecurity/IT roles, or related technical roles with hands-on engineering and systems deployment.
•    Certifications (preferred): CompTIA Cybersecurity Analyst (CySA+), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Enterprise Defender (GCED), or similar. •    Clearances/Background: Able to pass healthcare compliance/background checks.