Cybersecurity Administrator

NBBJ•Los Angeles, CA

2d•$80,000 - $100,000

About The Position

NBBJ is currently seeking a Cybersecurity Administrator to join our Columbus, Los Angeles or Seattle studio. The Security Administrator is responsible for monitoring, triaging, and investigating security alerts that impact NBBJ’s global digital environment. This role focuses on operational security functions, including incident investigation, security tooling administration, and hands-on support for implementing and maintaining security controls. The Security Administrator partners closely with the Security Engineer to strengthen the firm’s overall security posture while promoting cybersecurity as a collaborative and business-enabling function. The ideal candidate is detail-oriented, highly responsive, and takes pride in their work. Success in this role means ensuring that security events are addressed quickly and thoroughly, that controls are consistently applied, and that security operations run smoothly across all regions.

Requirements

Associate or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent work experience
2 to 4 years of experience in IT security, SOC operations, or related technical support roles
Security+, CCNA Security, or equivalent experience required
Strong understanding of security fundamentals and attack lifecycle
Experience working with SIEM, EDR, identity security, and cloud security platforms
Ability to analyze logs across endpoints, networks, and cloud systems
Strong written and verbal communication skills
Familiarity with scripting or automation using PowerShell or Python
Experience with Windows, macOS, and Linux environments

Nice To Haves

Additional certifications such as GSEC, GCTI, or Microsoft security certifications are preferred
Experience supporting distributed teams across multiple regions or time zones
Knowledge of regulatory or client frameworks, including Cyber Essentials Plus, NIST 800-171, CMMC L1 or L2, and CIS Controls
Ability to prioritize multiple issues and maintain service levels in a dynamic environment.
Strong attention to detail, curiosity, and a commitment to continual improvement

Responsibilities

Monitor security alerts from SIEM, EDR, email security, identity systems, cloud platforms, and other security tools.
Investigate suspicious activity by collecting evidence, analyzing logs, and escalating incidents as needed.
Document investigation notes, timelines, and outcomes for all security events.
Tune alerting rules and detection logic to improve fidelity and reduce noise.
Serve as the first responder for security incidents, ensuring timely triage and escalation.
Assist the Lead Security Engineer during active investigations and coordinated response efforts.
Maintain and update incident response procedures, checklists, and documentation.
Participate in tabletop exercises, lessons-learned reviews, and improvements to processes.
Support deployment, configuration, and maintenance of security tools, including EDR, MDM, vulnerability scanners, and cloud security platforms.
Work with IT and engineering teams to apply technical and administrative controls based on firm, client, and regulatory requirements.
Help implement policies, standards, and procedures across endpoints, networks, and cloud services.
Maintain inventories, dashboards, and reporting for security technologies.
Assist with the vulnerability management lifecycle by validating findings, tracking remediation progress, and verifying closure.
Coordinate with system owners to ensure patches and configuration changes are applied according to risk and priority.
Monitor trends and recurring issues to help inform long-term improvements.
Provide evidence and documentation for audits or client security assessments.
Support the Lead Security Engineer with mapping controls to frameworks such as NIST 800-171, CMMC, Cyber Essentials Plus, and CIS Controls.
Maintain internal documentation related to standards, objectives, and operating procedures.
Partner with Systems, Operational, and business teams to resolve security-related issues.
Provide clear, practical communication to stakeholders with varying levels of technical expertise.
Support the security awareness program by assisting with training, phishing simulations, and guidance to staff.
Assist in managing MSSP communications, escalations, and case follow-up.
Develop scripts or automations to streamline repetitive tasks.
Perform administrative tasks related to asset management, access reviews, and security reporting.