GEUS/CYBERSECURITY ENGINEER

FUNCTION: The Cybersecurity Engineer protects the organization’s IT, Operational Technology (OT), and critical infrastructure by managing risk, monitoring and responding to security events, implementing controls, and partnering with technical and operational teams to maintain secure, reliable, and resilient systems and data.

Primary Responsibilities:

• Evaluate emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices to strengthen the organization’s security posture.

• Design, implement, configure, monitor, and optimize cybersecurity controls to, prevent, detect, and respond to active and emerging cybersecurity events, alerts, incidents, vulnerabilities, and threats

• Lead security investigations and incident response, including containment, eradication, recovery, documentation, root cause analysis, remediation, and lessons learned.

• Evaluate, implement, administer, and optimize cybersecurity technologies for network, endpoint, identity, access, vulnerability, log, and threat management, including MFA, SSO, and secure remote access.

• Conduct vulnerability and risk assessments, coordinate remediation and support audits, compliance initiatives, and continuous security improvement.

• Analyze security logs, system events, network activity, and threat intelligence to identify security risks, policy violations, vulnerabilities, and malicious activity.

• Design and maintain secure network and system architectures, including routing security, network segmentation, security zones, access controls, and protections for Operational Technology (OT), Industrial Control Systems (ICS), SCADA systems, and other critical infrastructure assets.

• Develop and maintain change and configuration management processes which ensure technology assets and security controls are secure, documented, monitored, and maintained throughout their lifecycle.

• Provide cybersecurity leadership, training, and mentorship to strengthen organizational capability and security culture.

• Additional duties and projects may be assigned to support organizational and operational needs.

Minimum Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field, or an equivalent combination of education, certifications, military or technical training, and relevant experience. Candidates without a bachelor’s degree must have at least six years of directly related cybersecurity experience.

• At least four years of progressively responsible, hands-on cybersecurity experience securing enterprise networks, systems, and technology environments, including security controls, incident response, vulnerability management, risk mitigation, monitoring, threat detection and hunting, and program administration.

• Experience administering and optimizing cybersecurity tools for monitoring, threat detection and hunting, incident response, vulnerability management, endpoint and identity protection, log analysis, access management, and risk management.

• Experience supporting cybersecurity and network administration in medium-to-large enterprise environments.

• Experience designing, configuring, administering and troubleshooting enterprise networks, including routing, switching, OSPF, BGP, segmentation, VLANs, security zones, and access controls.

• Experience implementing, configuring and supporting identity, access, endpoint, malware prevention, patch management, and threat detection technologies, including MFA, SSO, privileged access, and access governance.

• Ability to obtain professional certifications such as, CISSP, CISM, GICSP, CCNA.CCNP, CompTIA Security+, Microsoft Security Certifications, or other relevant certifications

Preferred Qualifications:

• Current profession certifications such as, CISSP, CISM, GICSP, CCNA.CCNP, CompTIA Security+, Microsoft Security Certifications, or other relevant certifications

• Experience securing and supporting SCADA and other utility technology.

• Experience implementing, supporting cloud security controls, architecture, and shared-responsibility models.

Knowledge, Skills and Abilities:

• Strong knowledge of cybersecurity principles, frameworks, standards, risk management, security architecture, and best practices across enterprise and critical infrastructure environments.

• Experience maintaining change management, configuration management, and cybersecurity governance in enterprise and critical infrastructure environments.

• Experience securing and supporting OT, ICS, and critical infrastructure operations.

• Strong analytical, problem-solving, organizational, and communication skills, with the ability to troubleshoot, prioritize, work independently, exercise sound judgment, and communicate technical information effectively to diverse audiences.

• Ability to adapt to changing technologies, threats, and priorities.

Physical Effort:

• Work is primarily office-based and requires prolonged sitting, standing, walking, and computer use.

• Must occasionally lift or move computer, network, and communications equipment weighing up to 50 pounds.

• May require bending, reaching, stooping, climbing ladders or stairs, and working in confined technical spaces, including IDFs, MDFs, and data centers.

• Must have sufficient visual acuity to monitor systems, review documentation and logs, and distinguish color-coded equipment indicators.

Working Conditions:

• May work outside normal business hours and participate in an on-call rotation for incidents, maintenance, or emergencies.

• Occasional travel may be required for training, meetings, audits, or facility visits.

• May work in data centers, substations, network facilities, and other critical infrastructure environments.