Cyber Engineer

CDM Smith•Honolulu, HI

2d•Remote

About The Position

The Cyber Engineer will assist CDM Smith in their Continuous Threat Exposure Management (CTEM) journey. Items such as identifying, tracking, and verifying remediation of vulnerabilities across internal and external applications and systems. This role requires broad knowledge of enterprise applications, operating systems, networking, cloud infrastructure, and emerging threats. Working with IT infrastructure, application development and security operations teams, the engineer helps reduce vulnerabilities and attack surface risk while staying current on threats affecting both advanced and legacy technologies. You will help architect, deploy and operate secure cloud application infrastructure aligned to business needs. This advanced technical role supports operational innovation, provides cloud security direction, and helps deliver resilient applications at scale. The engineer is expected to apply strong administrative, troubleshooting, architecture, engineering, and design skills while maintaining policies and controls that support business direction. Working with security leadership, cloud security engineers assess the threat landscape and adapt quickly to reduce business risk. They should be highly technical, with 5–7+ years of security and systems administration experience across SaaS, IaaS, and PaaS environments. Strong analytical thinking, adaptability, work ethic, listening, and communication skills are essential. This role will also lead vulnerability management and collaboration with technology leadership and business units to secure company digital assets. They report on vulnerability criticality, exploit probability, business impact and remediation progress to security and IT leadership. The role requires pragmatic collaboration, urgency when needed and support for strategic and tactical initiatives that reduce attack surface through automation, innovation and operational efficiency. Develop and maintain secure, resilient enterprise-grade cloud & on-prem processes in tandem with architects and system engineers. Secure AI & NHI at scale Secure business applications and computing environments across public, private, or hybrid cloud infrastructures. Protect business applications in compliance with privacy, security, business resiliency, and compliance frameworks as defined in corporate policies. Maintain a consistent, secure environment using configuration management solutions (e.g., Puppet, Chef, Ansible, etc.). Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts. Deploy strong identity and access management (IDAM) controls across applications and computing environments. Assist with development, maintenance and utilization of scripts (e.g., Python, Ruby, etc.) to support custom extract, transform load (ETL) tools with a security focus for data flow. Attend regular technical project and implementation meetings and serve as the security consultant to help guide secure application and infrastructure configurations. Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments. Manage remediation efforts after security assessment findings outline weaknesses requiring attention. Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation. Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practice guidance. Apply learned knowledge across key lines of business, including products, practices and procedures. #LI-LP1 #LI-REMOTE

Requirements

5–7+ years of security and systems administration experience across SaaS, IaaS, and PaaS environments.
Strong analytical thinking, adaptability, work ethic, listening, and communication skills.
Demonstrated ability to use cloud tools and automation technologies to support secure, efficient infrastructure and security operations.
Proficient in one or more: Bicep, AKS, Terraform, Kafka, Kubernetes, Helm, OpenShift, scripting (Python, JavaScript).
Proven use with zero trust network access, encryption, web application firewalls, data protection, vulnerability management, API security, IaC.
Proven ability to influence technical teams and business units and collaborate to reduce attack surface.
Knowledge in one or more: NIST 800-144, 800-171, CIS, CSA-CCM, ISO (27040, 27017, 27001).
Ability to document technical policies and controls.
Strong knowledge of vulnerability management principles, methodologies, and best practices.
Ability to define, track, and report on key performance indicators (KPIs) and metrics to measure vulnerability management program effectiveness.
Experience automating asset inventory, vulnerability discovery, assessment, and reporting processes.
Ability to identify, assess, document, prioritize, and validate remediation of system and application vulnerabilities.
Knowledge of vulnerability assessment across applications, endpoints, databases, network infrastructure, mobile devices, and cloud environments.
Strong understanding of attack surface management, secure configuration practices, host hardening, and application hardening techniques.
Ability to prioritize remediation efforts based on vulnerability severity, exploitability, threat intelligence, and business risk exposure.
Experience maintaining vulnerability management documentation, policies, procedures, and remediation tracking records.
Ability to collaborate effectively with security engineering, security operations, infrastructure, IT operations, and development teams.
Strong understanding of change management processes and their impact on organizational security posture.
Ability to provide vulnerability-related guidance, training, and technical recommendations to stakeholders, developers, IT teams, and business leaders.
Experience conducting continuous asset discovery and monitoring remediation status across enterprise environments.
Ability to analyze emerging threats and recommend tactical measures to reduce attack surface and mitigate risk.
Experience supporting remediation efforts and validating security controls to address newly identified vulnerabilities and threats.
Ability to work in a collaborative purple-team environment with offensive security, defensive security, threat intelligence, risk management, and operations teams.
Strong analytical, problem-solving, and risk assessment skills with the ability to make sound remediation recommendations.
Ability to maintain and analyze inventories of internal and third-party assets, including vulnerability status, remediation recommendations, and overall security posture.
Excellent written and verbal communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences.
Commitment to staying current on emerging threats, vulnerabilities, attack techniques, and cybersecurity industry trends.
Bachelor's degree.
8 years of related experience.
Equivalent additional directly related experience will be considered in lieu of a college degree.

Responsibilities

Identify, track, and verify remediation of vulnerabilities across internal and external applications and systems.
Architect, deploy, and operate secure cloud application infrastructure aligned to business needs.
Support operational innovation, provide cloud security direction, and help deliver resilient applications at scale.
Apply strong administrative, troubleshooting, architecture, engineering, and design skills while maintaining policies and controls.
Assess the threat landscape and adapt quickly to reduce business risk.
Lead vulnerability management and collaboration with technology leadership and business units to secure company digital assets.
Report on vulnerability criticality, exploit probability, business impact, and remediation progress to security and IT leadership.
Support strategic and tactical initiatives that reduce attack surface through automation, innovation, and operational efficiency.
Develop and maintain secure, resilient enterprise-grade cloud & on-prem processes in tandem with architects and system engineers.
Secure AI & NHI at scale.
Secure business applications and computing environments across public, private, or hybrid cloud infrastructures.
Protect business applications in compliance with privacy, security, business resiliency, and compliance frameworks.
Maintain a consistent, secure environment using configuration management solutions (e.g., Puppet, Chef, Ansible, etc.).
Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts.
Deploy strong identity and access management (IDAM) controls across applications and computing environments.
Assist with development, maintenance, and utilization of scripts (e.g., Python, Ruby, etc.) to support custom extract, transform load (ETL) tools with a security focus for data flow.
Attend regular technical project and implementation meetings and serve as the security consultant to help guide secure application and infrastructure configurations.
Actively monitor, assess, and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments.
Manage remediation efforts after security assessment findings outline weaknesses requiring attention.
Document, formulate, and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
Stay apprised of current and proposed security changes impacting regulatory, privacy, and security industry best practice guidance.
Apply learned knowledge across key lines of business, including products, practices, and procedures.