Cybersecurity Engineer

We're looking for a Cybersecurity Engineer with a strong focus on Identity and Access Management (IAM) to help design, implement, and defend secure access across our family of companies. This is a hands-on technical role that supports enterprise identity services, access controls, authentication, authorization, provisioning, and audit-ready access practices while maintaining broad responsibility across incident response, vulnerability management, security monitoring, AI system security, and core cybersecurity controls. You'll work closely with security, IT operations, application owners, and business stakeholders to reduce identity-related risk, improve least-privilege access, and translate technical security concerns into practical business action.

• Implement and maintain security controls, building, operating, and improving controls for identity and access management, multifactor authentication, privileged access, single sign-on, conditional access, intrusion detection, network segmentation, and data protection based on established architecture.
• Maintain IAM platform integrations, configuring and troubleshooting integrations with directory services, cloud platforms, SaaS applications, and business systems using established authentication and authorization patterns.
• Assist with detection, triage, containment, and investigation of security incidents, including identity-related events such as suspicious sign-ins, privilege misuse, account compromise, and anomalous access activity.
• Conduct penetration testing and vulnerability assessments, testing across networks, applications, cloud environments, and identity controls. Help track remediation to completion.
• Assess and monitor risks in AI and LLM-based tools, including agentic tools used for internal workflows. Assist with access scoping, connector permissions, identity-based controls, and audit logging under senior guidance.
• Contribute to risk and compliance efforts by documenting and communicating findings related to cyber risk, identity governance, access control effectiveness, and audit readiness. Assist with reporting on security posture and incident trends.
• Apply cybersecurity ethics and compliance standards. Follow relevant law, regulation, and internal policy consistently in daily work.