Cybersecurity Engineer

About the role

We are seeking a hands-on Cybersecurity Engineer to secure and support our organization's infrastructure, identity, endpoints, and security operations. This role focuses on vulnerability management and automated remediation across hybrid environments, leveraging industry-leading security, endpoint management, and IT service management platforms. The successful candidate will be based within commuting distance of our Woodinville, WA location.

Ste. Michelle Wine Estates is the largest wine company in the Pacific Northwest, with roots dating back to 1933. Our award-winning wines are an expression of the Pacific Northwest's spirit, land, and excellence-driven culture. Our portfolio includes brands such as Chateau Ste. Michelle, 14 Hands, Columbia Crest, and Spring Valley Vineyard, distributed in over 100 countries.

Responsibilities

• Manage and secure Windows servers, directory services, identity platforms, and hybrid infrastructure.
• Troubleshoot and remediate day-to-day security and infrastructure issues across servers, identity systems, and endpoints.
• Manage vulnerability identification, prioritization, remediation, and validation using platforms such as Rapid7, Tenable, Qualys, or Microsoft Defender Vulnerability Management.
• Build and maintain automated vulnerability remediation workflows across vulnerability management, endpoint security, device management, infrastructure management, and ITSM platforms.
• Monitor and investigate security events and endpoint detections using EDR/XDR and SIEM platforms such as CrowdStrike, Microsoft Defender, SentinelOne, Palo Alto Cortex XDR, Splunk, Microsoft Sentinel, or QRadar.
• Identify, investigate, and remediate security vulnerabilities, misconfigurations, and exposure risks.
• Track CVEs and emerging threats and translate findings into actionable remediation plans.
• Harden Windows systems, directory services, endpoints, and infrastructure against security threats.
• Develop automation and scripting solutions using PowerShell and other enterprise automation tools for security and infrastructure operations.
• Support identity and access management (IAM), privileged access, authentication, and identity security initiatives.
• Participate in incident response, containment, remediation, and root cause analysis.
• Audit systems and infrastructure for secure configuration and compliance with security standards.
• Partner with Infrastructure and IT teams to implement security controls and resolve vulnerabilities.
• Support security assessments, penetration testing, risk assessments, and security audits.
• Research emerging cybersecurity threats and evaluate technologies and solutions to improve the organization's security posture.
• Support SOC 2, PCI DSS 4.0, CIS, HIPAA, and other applicable security and compliance requirements.
• Support vendor security assessments and GRC activities as needed.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent experience.
• Strong hands-on experience supporting Windows Server environments, enterprise infrastructure, and hybrid cloud environments.
• Expertise in Active Directory, Entra ID (Azure AD), IAM, authentication, authorization, and privileged access management.
• Experience with vulnerability management, endpoint security, EDR/XDR, and security monitoring platforms.
• Advanced PowerShell scripting and automation experience for infrastructure and security operations.
• Experience with endpoint management, infrastructure management, and IT service management tools (e.g., Intune, Workspace ONE, Azure Arc, AWS Systems Manager, ServiceNow, Jira).
• Strong knowledge of incident response, security operations, secure configuration, network security, and risk management.
• Working knowledge of Linux administration.
• Proven troubleshooting, problem-solving, and root cause analysis skills.
• Ability to collaborate effectively across IT and Infrastructure teams and drive remediation efforts to completion.
• Excellent communication and teamwork skills.
• Relevant certifications such as CISSP, CISM, CISA, GSEC, or similar preferred.
• Knowledge of ITIL, ITSM, and SDLC methodologies preferred.
• History of responsible use of alcohol and other appropriate conduct, as well as fitness to be licensed, permitted, and/or certified by state and/or local regulatory bodies.

Pay

$95,791.00 - $124,506.00 per year based upon relevant experience. Individual offers are made dependent upon a candidate's prior experience and education level as it pertains to the role.

Benefits

• Health Care Coverage including medical, dental, vision, and prescription (eligible on date of hire for full-time employees).
• Paid Vacation & Holidays.
• 401(k) with Employer Match.
• Employee Wine Discounts.