Senior Cybersecurity Engineer

Job Responsibilities Develop and maintain our information security policy framework and tie implementation efforts to compliance requirements (SOC 2 Type II, ISO 27001, NIST 800-53/171), assessing risk across people, processes, and technology.

Design, deploy, and operate our IAM infrastructure — including Okta and HashiCorp Vault. Implement network security controls (segmentation, hardening, traffic monitoring/observability) to enforce least-privilege access and detect anomalous activity across IT and site environments.

Partner directly with cross-functional teams to embed best InfoSec practices into the product development lifecycle, providing the tools and guardrails engineers need to build and ship secure products.

Enforce baseline security policies across macOS, Windows, Ubuntu, and embedded Linux platforms, and continuously develop our SIEM to centralize log collection and enable detection across endpoints, cloud, and SaaS.

Support and mature vulnerability management: identification, prioritization, remediation tracking, and reporting to leadership and auditors.

Assess and manage third-party and vendor security risk, including quantum cloud provider relationships and research partnerships, and automate processes and monitoring using Python, Bash, or similar scripting languages

Act as a technical escalation point for security issues across IT and engineering

Experience & Education Bachelor’s in Cybersecurity, Computer Science, or Computer Engineering

5+ years of experience in IT, DevOps or engineering

2+ years of experience specific to cybersecurity

Qualifications Experience building and implementing security programs — including policies, frameworks, and compliance initiatives — in startup or rapidly scaling organizations.

Working knowledge of NIST SP 800-53/171, (continuous monitoring) — or strong ability to ramp quickly in a federal compliance environment

Deep hands-on Okta experience, including lifecycle management, conditional access, and MFA enforcement, and PAM Management

Solid technical foundation across endpoint security, cloud/physical IAM, Scripting/automation ability (Python, Bash, or similar) to reduce manual security operations work and SIEM Platforms

Strong understanding of certificate and PKI fundamentals — issuance, rotation, trust chains — ideally with hands-on Vault PKI experience

Proficiency with Kali Linux to perform cybersecurity assessments

Ability to execute penetration testing and blue-team exercises