Security Incident Management Engineer Jobs

1 job found

Today

Cybersecurity Engineer

Nodak Insurance Company Fargo, ND

Fargo, ND

Today

Full time Cyber Security Cyber Security Engineer Cybersecurity

Apply Now

Job Description

Own and advance enterprise security architecture for an insurance organization in Fargo, ND.

Responsibilities

Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, IDS/IPS, SIEM, endpoint detection and response, email security, and identity protection
Evaluate and select security technologies; define configuration standards and create reference designs for security operations
Lead investigation, containment, and resolution of security incidents
Build and tune detection content, correlation logic, and automated response actions
Develop and maintain the Incident Response Plan; run periodic tabletop exercises and drills
Produce post-incident reports with assigned corrective actions
Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards
Coordinate third-party penetration tests and validate remediation
Perform threat modeling and security design reviews for new systems and significant changes
Conduct security design reviews for AI services, models, agents, and integrations
Define and implement data protection controls for enterprise AI use, including data loss prevention, tenant boundaries, and logging
Support the AI governance program with technical assessments and control recommendations
Build automation and integrations to reduce manual security work (scripting, API integrations between security platforms, configuration as code where applicable)
Lead medium to large projects to improve overall cybersecurity posture
Define project scope and sequence; coordinate delivery across technical teams
Prioritize projects using impact and cost assessment
Translate regulatory requirements into technical control designs (including GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, and state regulations)
Support internal and external security audits; collaborate across teams on compliance and audit activities
Build and maintain security architecture documentation, configuration standards, and engineering runbooks
Provide technical direction to security operations staff and act as the escalation point for complex security issues

Requirements

Working knowledge of common security frameworks and ability to translate them into technical controls, including NIST CSF 2.0, NIST SP 800-53, ISO 27001, and CIS Controls
Deep understanding of enterprise security domains: identity and access management, endpoint detection and response, email and collaboration security, data protection, network security, and secure application delivery
Experience architecting and administering Microsoft 365 and Microsoft Entra ID, including Conditional Access, Microsoft Defender XDR, Intune, and Purview
Experience building and tuning detection content in SIEM or XDR, including writing queries and correlation logic
Proficiency with scripting and automation (e.g., PowerShell, Python) and integrating security platforms through APIs
Sound judgment under pressure, with ability to direct containment decisions during an active incident
Strong written and verbal communication skills for technical and non-technical audiences
Experience securing and administering enterprise generative AI solutions including Microsoft Copilot and Google Gemini

Technologies

Firewalls
IDS/IPS
SIEM
Endpoint detection and response
Email security
Identity protection
Microsoft 365
Microsoft Entra ID
Conditional Access
Microsoft Defender XDR
Intune
Purview
XDR
PowerShell
Python
API integrations
Configuration as code
Microsoft Copilot
Google Gemini
GLBA Safeguards Rule
NAIC Insurance Data Security Model Law
PCI-DSS
NIST CSF 2.0
NIST SP 800-53
ISO 27001
CIS Controls

Benefits

401(k)
401(k) matching
Dental insurance
Employee assistance program
Flexible schedule
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Parental leave
Professional development assistance
Referral program
Retirement plan
Vision insurance

Education, Work Experience, and Certifications

Bachelor’s degree or higher-level in Cybersecurity, Computer Science, IT Management, or other relevant area, or equivalent practical experience
Years of Experience: 7
Certified Information Systems Security Professional (CISSP)
Microsoft Certified: Cybersecurity Architect (SC-100)
GIAC Certified Incident Handler (GCIH) or GIAC Certified Intrusion Analyst (GCIA)
Relevant vendor-specific certifications (e.g., Palo Alto Networks, Microsoft Azure Security)
Experience (Preferred): Cybersecurity 7 years; Computer science 7 years; IT management 7 years

Travel Requirements

Light travel by car or air, including overnight

Physical Demands / Working Conditions

Ability to withstand typical office work involving sitting, standing, typing, and tasks indoors near other people
Must be able to exert up to 10 pounds of force occasionally to move objects
Close visual acuity required for preparing and analyzing data, viewing a computer screen, visual inspection, assembly of parts, and extensive reading
Flexible work schedule to meet business needs; be on call 24x7; work on-site during specified or core hours
Must be able to operate standard computer hardware

Location and Work Mode

Work location: In person
Location: Fargo, ND (onsite)
Ability to commute: Fargo, ND 58102 (Preferred)

View full job page →

Get Security Incident Management Engineer Jobs alerts

New Security Incident Management Engineer Jobs, daily.