Cybersecurity Engineer

About The Role

We are seeking an experienced Cybersecurity Engineer to join our Technology Risk & Cybersecurity practice. In this role, you will design, implement, and assess security solutions for a diverse portfolio of enterprise clients across industries including financial services, healthcare, government, and manufacturing. You will work as part of client engagement teams, translating security strategy into hands-on technical execution while helping clients strengthen their security posture against evolving threats.

Key Responsibilities

• Design, deploy, and maintain security architectures, including network segmentation, identity and access management (IAM), endpoint protection, and cloud security controls (AWS, Azure, GCP)
• Conduct security assessments, vulnerability scans, and penetration testing to identify risks in client environments
• Develop and implement security monitoring solutions (SIEM, SOAR) and support incident detection and response activities
• Support clients through security audits and compliance initiatives (e.g., NIST, ISO 27001, SOC 2, PCI-DSS, HIPAA)
• Review and harden system configurations, applications, and infrastructure against industry best practices and frameworks (CIS Benchmarks, MITRE ATT&CK)
• Automate security processes and controls using scripting/Infrastructure-as-Code (Python, Terraform, PowerShell)
• Collaborate with client stakeholders to translate technical findings into business risk narratives and remediation roadmaps
• Contribute to proposal development, engagement scoping, and thought leadership materials
• Mentor junior consultants and support internal capability-building initiatives
• Stay current on emerging threats, tools, and regulatory requirements relevant to client industries

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• 3–6+ years of experience in cybersecurity engineering, security operations, or IT risk consulting
• Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) security services
• Working knowledge of network security, firewalls, IDS/IPS, and endpoint detection tools
• Familiarity with security frameworks and regulations (NIST CSF, ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS as applicable)
• Scripting/automation experience (Python, Bash, or PowerShell)
• Strong written and verbal communication skills, with ability to present to both technical and executive audiences
• Willingness to travel to client sites (varies by engagement, typically 20–50%)

Preferred Qualifications

• Relevant certifications: CISSP, CISM, OSCP, CCSP, CEH, or cloud security certifications (AWS/Azure Security Specialty)
• Prior consulting or client-facing professional services experience
• Experience with SIEM platforms (Splunk, Sentinel, QRadar) and SOAR tooling
• Familiarity with DevSecOps practices and CI/CD pipeline security
• Experience with Infrastructure-as-Code security tools (Terraform, CloudFormation scanning)

Benefits

• Unlimited paid time off
• Healthcare benefits
• Dental benefits
• Vision benefits
• Disability insurance
• Life insurance benefits
• Retirement benefits, including 401(k) and a potential company match
• Parental leave for both birthing (up to 14 weeks of paid leave) and non-birthing parents (up to 4 weeks paid leave), as well as adoption leave (up to 8 weeks of paid leave), subject to qualifications
• Child hospitalization leave (up to 15 paid calendar days per year), subject to qualifications
• "Be kind to yourself day" on your anniversary (subject to terms and conditions)
• Graduation and birthing gifts, subject to eligibility
• Paid Jury duty (up to 4 weeks a year), subject to eligibility
• Paid moving days (up to 2 days a year), subject to eligibility
• Approximately 12 paid company holidays a year

Pay

Salary Range: $100,000 - $125,000