Cybersecurity Engineer

Cybersecurity Engineer role focused on designing, building, and improving security controls to protect organizational information assets.

Responsibilities

• Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, IDS/IPS, SIEM, endpoint detection and response, email security, and identity protection
• Evaluate and select new security technologies; define configuration standards and deliver reference designs used by security operations
• Lead investigation, containment, and resolution of security incidents
• Build and tune detection content, correlation rules, and automated response actions
• Develop and maintain the Incident Response Plan; run periodic tabletop exercises and drills
• Produce post-incident reports with assigned corrective actions
• Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards
• Coordinate third-party penetration tests and validate remediation outcomes
• Perform threat modeling and security design reviews for new systems and significant changes
• Conduct security design reviews for AI services, models, agents, and integrations
• Define and implement data protection controls for enterprise AI, including data loss prevention, tenant boundaries, and logging
• Support the AI governance program with technical assessments and control recommendations
• Build automation and integrations to reduce manual security effort, including scripting, API integrations between security platforms, and configuration as code where applicable
• Lead medium to large projects to improve overall cybersecurity posture, defining scope, sequence, and coordinating delivery across technical teams
• Prioritize projects based on impact and cost assessment
• Translate regulatory requirements into technical control designs, including GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, and applicable state regulations
• Support internal and external security audits and collaborate with internal teams on compliance and audit-related activities
• Build and maintain security architecture documentation, configuration standards, and engineering runbooks
• Provide technical direction to security operations staff and act as the escalation point for complex security issues

Requirements

• Working knowledge of common security frameworks with ability to translate them into technical controls (e.g., NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Controls)
• Deep understanding across enterprise security domains: identity and access management, endpoint detection and response, email and collaboration security, data protection, network security, and secure application delivery
• Experience architecting and administering Microsoft 365 and Microsoft Entra ID, including Conditional Access, Microsoft Defender XDR, Intune, and Purview
• Experience building and tuning detection content in SIEM or XDR platforms, including writing queries and correlation logic
• Proficiency with scripting and automation (e.g., PowerShell, Python) and integrating security platforms via APIs
• Sound judgment under pressure, including directing containment decisions during an active security incident
• Strong written and verbal communication skills for technical and non-technical audiences
• Experience securing and administering enterprise generative AI solutions such as Microsoft Copilot and Google Gemini

Technologies

• NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Controls
• Microsoft 365, Microsoft Entra ID, Conditional Access, Microsoft Defender XDR, Intune, Purview
• SIEM, XDR
• PowerShell, Python, APIs
• Microsoft Copilot, Google Gemini
• Firewalls, intrusion detection/prevention systems (IDS/IPS)
• Endpoint detection and response, email security, identity protection
• Data loss prevention, tenant boundaries, logging, configuration as code
• GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS
• Microsoft Certified: Cybersecurity Architect (SC-100)

Education, Work Experience, and Certifications

• Experience: 7+ years
• Education: Bachelor’s degree or higher-level in Cybersecurity, Computer Science, IT Management, or other relevant area (or equivalent)
• Certifications: CISSP
• Certifications: Microsoft Certified: Cybersecurity Architect (SC-100)
• Certifications: GIAC Certified Incident Handler (GCIH) or GIAC Certified Intrusion Analyst (GCIA)
• Certifications: Relevant vendor-specific certifications (e.g., Palo Alto Networks, Microsoft Azure Security)

Travel Requirements

• Light travel by car or air, including overnight

Physical Demands / Working Conditions

• Ability to handle typical office work including sitting, standing, and typing indoors; tasks may occur in close proximity to other people
• Ability to exert up to 10 pounds of force occasionally to move objects
• Close visual acuity for preparing and analyzing data and figures, viewing a computer screen, visual inspection, assembly of parts, and extensive reading
• Flexible work schedule to meet business needs, including being on call 24x7 and being on-site during specified or core hours
• Ability to operate standard computer hardware

Location: Fargo, ND (onsite)

Salary: USD 93,798 - 125,064 per year