Cybersecurity Engineer

Own and advance enterprise security architecture for an insurance organization in Fargo, ND.

Responsibilities

• Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, IDS/IPS, SIEM, endpoint detection and response, email security, and identity protection
• Evaluate and select security technologies; define configuration standards and create reference designs for security operations
• Lead investigation, containment, and resolution of security incidents
• Build and tune detection content, correlation logic, and automated response actions
• Develop and maintain the Incident Response Plan; run periodic tabletop exercises and drills
• Produce post-incident reports with assigned corrective actions
• Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards
• Coordinate third-party penetration tests and validate remediation
• Perform threat modeling and security design reviews for new systems and significant changes
• Conduct security design reviews for AI services, models, agents, and integrations
• Define and implement data protection controls for enterprise AI use, including data loss prevention, tenant boundaries, and logging
• Support the AI governance program with technical assessments and control recommendations
• Build automation and integrations to reduce manual security work (scripting, API integrations between security platforms, configuration as code where applicable)
• Lead medium to large projects to improve overall cybersecurity posture
• Define project scope and sequence; coordinate delivery across technical teams
• Prioritize projects using impact and cost assessment
• Translate regulatory requirements into technical control designs (including GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, and state regulations)
• Support internal and external security audits; collaborate across teams on compliance and audit activities
• Build and maintain security architecture documentation, configuration standards, and engineering runbooks
• Provide technical direction to security operations staff and act as the escalation point for complex security issues

Requirements

• Working knowledge of common security frameworks and ability to translate them into technical controls, including NIST CSF 2.0, NIST SP 800-53, ISO 27001, and CIS Controls
• Deep understanding of enterprise security domains: identity and access management, endpoint detection and response, email and collaboration security, data protection, network security, and secure application delivery
• Experience architecting and administering Microsoft 365 and Microsoft Entra ID, including Conditional Access, Microsoft Defender XDR, Intune, and Purview
• Experience building and tuning detection content in SIEM or XDR, including writing queries and correlation logic
• Proficiency with scripting and automation (e.g., PowerShell, Python) and integrating security platforms through APIs
• Sound judgment under pressure, with ability to direct containment decisions during an active incident
• Strong written and verbal communication skills for technical and non-technical audiences
• Experience securing and administering enterprise generative AI solutions including Microsoft Copilot and Google Gemini

Technologies

• Firewalls
• IDS/IPS
• SIEM
• Endpoint detection and response
• Email security
• Identity protection
• Microsoft 365
• Microsoft Entra ID
• Conditional Access
• Microsoft Defender XDR
• Intune
• Purview
• XDR
• PowerShell
• Python
• API integrations
• Configuration as code
• Microsoft Copilot
• Google Gemini
• GLBA Safeguards Rule
• NAIC Insurance Data Security Model Law
• PCI-DSS
• NIST CSF 2.0
• NIST SP 800-53
• ISO 27001
• CIS Controls

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible schedule
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Retirement plan
• Vision insurance

Education, Work Experience, and Certifications

• Bachelor’s degree or higher-level in Cybersecurity, Computer Science, IT Management, or other relevant area, or equivalent practical experience
• Years of Experience: 7
• Certified Information Systems Security Professional (CISSP)
• Microsoft Certified: Cybersecurity Architect (SC-100)
• GIAC Certified Incident Handler (GCIH) or GIAC Certified Intrusion Analyst (GCIA)
• Relevant vendor-specific certifications (e.g., Palo Alto Networks, Microsoft Azure Security)
• Experience (Preferred): Cybersecurity 7 years; Computer science 7 years; IT management 7 years

Travel Requirements

• Light travel by car or air, including overnight

Physical Demands / Working Conditions

• Ability to withstand typical office work involving sitting, standing, typing, and tasks indoors near other people
• Must be able to exert up to 10 pounds of force occasionally to move objects
• Close visual acuity required for preparing and analyzing data, viewing a computer screen, visual inspection, assembly of parts, and extensive reading
• Flexible work schedule to meet business needs; be on call 24x7; work on-site during specified or core hours
• Must be able to operate standard computer hardware

Location and Work Mode

• Work location: In person
• Location: Fargo, ND (onsite)
• Ability to commute: Fargo, ND 58102 (Preferred)