Staff Cyber Security Engineer

Accountabilities Conduct end-to-end security and threat analysis for enterprise initiatives involving new or modified technology deployments, identifying risks and defining appropriate security requirements and mitigations.

Partner with business stakeholders, enterprise IT, engineering teams, and cybersecurity functions to ensure security requirements are clearly understood and incorporated throughout all phases of projects.

Provide technical security guidance across network, application, cloud, perimeter, core systems, endpoint, and other enterprise security domains, drawing on advanced expertise in at least one area.

Evaluate technology architectures and designs against cybersecurity best practices, including frameworks and standards such as OWASP Top 10 and CWE/SANS Top 25.

Develop, document, and communicate secure design guidelines, security controls, and recommended practices that support the organization’s desired security posture.

Perform threat analysis and modeling using industry frameworks such as MITRE ATT&CK, where applicable, and translate findings into practical security improvements.

Collaborate with Cyber Security, GRC, Incident Response, Engineering, and Operations teams to address complex security challenges and strengthen enterprise controls.

Communicate the importance and value of cybersecurity programs and services to technical and non-technical audiences, building stakeholder trust, support, and buy-in.

Use architecture and diagramming tools to clearly communicate secure designs, security controls, dependencies, and risk considerations.

Provide mentorship and constructive feedback to team members while contributing to a culture of continuous improvement and technical excellence.

Manage multiple concurrent initiatives effectively, prioritizing work according to business needs, risk, deadlines, and overall security impact.

Requirements

8+ years of experience partnering with business and technical teams to architect and deliver cybersecurity solutions, with a strong track record of translating security needs into practical technology outcomes.

8+ years of experience consulting with business teams on threat mitigation and security best practices across areas such as perimeter security, application security, core systems, endpoint security, and cloud environments.

Strong understanding of common threats affecting network, cloud, web, application, and enterprise technology environments.

Advanced technical expertise in at least one major cybersecurity domain, with the ability to navigate complex technical and security challenges.

Strong knowledge of cybersecurity engineering and operations, incident response, governance, risk, and compliance functions.

Experience developing and documenting security guidelines, best practices, architectures, and controls, as well as using diagramming tools to communicate secure designs.

Familiarity with security frameworks and control sets such as MITRE ATT&CK, NIST Cybersecurity Framework, CIS Critical Security Controls, and cloud security frameworks.

Understanding of data protection and privacy regulations and standards, including PCI DSS, SOX, HIPAA, GDPR, and CCPA.

In-depth understanding of common IaaS, PaaS, and SaaS cloud services and the security considerations associated with them.

Ability to balance security policies and requirements with engineering and operational realities while maintaining an appropriate enterprise security posture.

Excellent written, verbal, and presentation skills, with the ability to communicate effectively with both technical and non-technical stakeholders.

Strong collaboration skills, including the ability to give and receive constructive feedback and mentor colleagues across different levels of experience.

Excellent organization and time management skills, with the ability to prioritize multiple projects and competing security initiatives.

A formal degree is not required; relevant professional experience and demonstrated cybersecurity expertise are prioritized.

Benefits

Salary range of $125,000–$155,000 , with eligibility for a bonus.

Fully remote work, with the position designed to be performed from a non-company worksite, typically an employee’s residence.

Medical, dental, and vision insurance.

401(k) retirement plan.

Paid leave.

Tuition reimbursement.

Additional employee discounts and perks.

Opportunity to work across complex enterprise security, cloud, application, network, and technology environments.

Broad collaboration with business, engineering, IT, cybersecurity, operations, and governance teams.

Opportunity to contribute to security architecture, threat analysis, enterprise security strategy, and technical mentorship.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1