Cyber Security Engineer

About the role

Trystar’s team members are our most important asset, and we are looking for a highly skilled Cyber Security Engineer to lead the design, implementation, monitoring, and continuous improvement of our cybersecurity program. This role is responsible for securing Trystar’s cloud, infrastructure, endpoint, identity, and operational technology environments while enabling business growth, innovation, and operational excellence. The ideal candidate combines strong hands-on cybersecurity expertise with strong engineering and risk management capabilities. This role will serve as the technical lead for threat detection, incident response, vulnerability management, identity security, security operations, and cybersecurity architecture across the organization. We are looking for people who believe in our guiding principles and values of: Safety – We believe everyone should leave Trystar facilities in the same or better condition than when they arrived.Integrity – We’re honest, transparent, and committed to doing what’s right.Customer focus – We have relentless focus on our customers and their success.Right with speed – We use good judgement, make thoughtful decisions quickly, and execute them with purpose and intensity.Play for each other – We’re a team. We show up for each other and we know that through teamwork we achieve greatness.Champion change – We know adaptation and improvement are requirements to survive and to thrive.Enjoy the journey – We create an environment where our team feels appreciated and has fun along the way.

Responsibilities

• Lead cybersecurity incident detection, investigation, containment, remediation, and recovery activities.
• Serve as the primary technical resource during security incidents.
• Develop and maintain incident response playbooks and procedures.
• Partner with internal stakeholders, external partners, cyber insurance providers, and forensic teams during investigations.
• Conduct threat hunting and root cause analysis activities.
• Drive continuous improvements to security monitoring and alerting capabilities.
• Own and enhance identity security controls across Microsoft Entra ID and Active Directory environments.
• Lead implementation and management of Conditional Access, Multifactor Authentication (MFA), Privileged Identity Management (PIM), and FIDO2 passwordless authentication.
• Secure endpoint environments through Microsoft Defender and Intune.
• Establish identity governance and privileged access standards.
• Partner with Digital & IT Teams to implement least-privilege access models.
• Own Microsoft Defender XDR and related security technologies.
• Monitor and investigate security events across endpoints, identities, email, cloud applications, and infrastructure.
• Develop and maintain security dashboards, alerts, and operational reporting