Ensure IT operations meet NIST, ISO 27001, and CMMC standards; develop and maintain detailed security documentation for business proposals and audits
Monitor logs and security tools for threats; lead vulnerability management and proactive incident response
Enforce MFA, least-privilege principles, and data loss prevention (DLP) strategies
Conduct regular penetration testing, vulnerability scans, and system hardening
Lead cybersecurity awareness training for staff, focusing on phishing prevention and risk management
Align IT security strategy with business objectives and develop formal IT procedures

Bachelor’s degree in IT, Cybersecurity, or a related field (or equivalent experience)
Strong experience with firewalls, VPNs, and network security configurations
Advanced proficiency in SharePoint, Windows/Mac OS environments, and cloud infrastructure
Experience with EDR/MDR tools, vulnerability scanners, and log monitoring software, GRC tools
Practical experience implementing NIST or CMMC frameworks
Ability to perform root-cause analysis and forensic investigations
Capable of translating complex technical risks into business-friendly language for leadership
High attention to detail for compliance logging

Comprehensive Health Benefits (Medical, Dental and Vision)
Flexible Spending Accounts (FSA) & Health Savings Account (HSA)
Retirement Plan with 4% match and discretionary match at year end
Paid Time Off (PTO): 15 days of PTO accrued per year; 7 holidays+ 3 Floating holidays; 2 Innovation days (paid training days)
Short Term and Long-Term Disability
Paid Parental Leave
Paid Jury Duty leave
Life and AD&D Insurance
Critical Illness Insurance
Training and Development
Wellness Incentives & Discount programs
Employee Referral Program
Annual Charity Donation Match

Security Engineer

Key skills