Cybersecurity & Cloud Infrastructure Engineer

CHDI Management•Princeton, NJ

1d•$120,000 - $180,000•Hybrid

About The Position

CHDI Management is seeking an experienced Cybersecurity and Cloud Infrastructure Engineer to manage and protect the organization’s data assets, cloud infrastructure, and technology systems. The role serves as the internal cybersecurity subject matter expert, identifying and remediating vulnerabilities, governing identity and access across cloud platforms, and maintaining the organization’s security posture as threats evolve. The position combines operational and strategic responsibilities. It monitors and responds to security events, manages vulnerability and penetration-testing programs, and administers security controls across AWS, Microsoft Azure, and Microsoft 365. It will also help secure emerging AI infrastructure, including AWS Bedrock and related services, as CHDI expands its use of AI in research and operations. The engineer collaborates with IT, researchers, the Data Protection Officer, the Data Manager, and end users to promote security best practices and protect systems, accounts, and data. The position is based in Princeton, New Jersey, with a hybrid schedule of two to three days per week in the office and occasional travel to CHDI’s other offices. Candidates must be local to Princeton, NJ. Vaccination against COVID-19 is a prerequisite for employment at CHDI Management. The salary range is $120,000–$180,000, with exact compensation varying based on experience.

Requirements

At least 5 years of experience in an information security or cloud security engineering role.
Demonstrated experience managing vulnerability management programs, including scanning tools such as Tenable or Qualys and remediation workflows.
Hands-on experience managing and securing AWS and/or Microsoft Azure environments, including IAM, security groups, logging, and monitoring configurations.
Experience managing IAM platforms, including AWS IAM and Microsoft Entra ID (Azure AD), conditional access, and privileged identity management.
Familiarity with AI platform security, including access governance and data handling for services such as AWS Bedrock, Azure OpenAI, or equivalent.
Experience coordinating third-party penetration-testing engagements and driving remediation of findings.
Strong understanding of security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, or SOC 2.
Excellent written and verbal communication skills, including the ability to explain complex security concepts to non-technical stakeholders.
Ability to establish and maintain effective working relationships across the organization.
Ability to self-initiate, manage competing priorities, and respond decisively under pressure.
Bachelor’s degree in a relevant field is required.
Must be local to Princeton, New Jersey.
Vaccination against COVID-19 is a prerequisite for employment at CHDI Management.

Nice To Haves

Experience implementing or operating a SIEM platform such as Microsoft Sentinel, Splunk, or equivalent.
Familiarity with zero-trust architecture principles and implementation.
Experience with Microsoft Purview for data governance, compliance, and information protection.
Scripting or automation skills such as Python or PowerShell to support security operations and tooling.
Knowledge of data privacy regulations and compliance frameworks relevant to research organizations, such as GDPR, HIPAA, or FISMA.
Experience in a nonprofit, research, or life sciences organization.
Familiarity with ITIL best practices and IT service management frameworks.
One or more strongly preferred certifications: CISSP, CCSP, AWS Certified Security – Specialty, Microsoft Certified: Security Operations Analyst Associate (SC-200), Microsoft Certified: Identity and Access Administrator Associate (SC-300), CompTIA Security+ or CySA+.
Certified Ethical Hacker (CEH) or GIAC Penetration Tester (GPEN) certification is preferred but not required.

Responsibilities

Lead the vulnerability management program, including continuous scanning, prioritization, tracking, and remediation across endpoints, servers, cloud workloads, and applications.
Manage scheduled penetration-testing engagements, including vendor selection and scoping, coordinating testing, reviewing findings, and driving remediation to completion.
Develop and maintain remediation tracking processes and SOPs, working with IT and application owners to resolve critical and high-severity findings promptly.
Produce reports on vulnerability status and remediation progress for IT leadership and organizational stakeholders.
Monitor emerging threats, CVEs, and security advisories; assess organizational exposure and initiate appropriate responses.
Manage security posture management tooling and findings for data and cloud environments, ensuring findings are reviewed and addressed promptly.
Monitor and respond to security events, alerts, and incidents across endpoints, cloud services, email, and network systems; document investigations and remediation actions.
Manage data loss prevention policies, information protection labels, and data classification frameworks for sensitive organizational and research data.
Administer email security controls, including anti-phishing, anti-malware, and DMARC/DKIM/SPF configurations; investigate phishing reports and suspicious account activity.
Maintain and test the incident response plan and lead or support response activities following security breaches or data loss events.
Develop and deliver security awareness content and communications on threats such as phishing and social engineering.
Maintain documentation of security configurations, procedures, incident records, and audit evidence.
Manage security-provider relationships, contracts, and invoicing, and hold vendors accountable for service levels and deliverables.
Administer and enforce security configurations across AWS and Microsoft Azure in alignment with security baselines and best practices such as CIS Benchmarks and NIST.
Secure AI infrastructure and services, including AWS Bedrock and other generative AI platforms, through access controls, data-handling policies, SOPs, and usage governance.
Monitor cloud environments for misconfigurations, anomalous activity, and policy violations using cloud-native and third-party tools.
Collaborate with infrastructure and application teams to incorporate security requirements into cloud architecture and new service deployments.
Administer and govern IAM across cloud platforms, including AWS IAM and Microsoft Entra ID (Azure AD), applying least privilege and role-based access controls.
Work with the Data Protection Officer and Data Manager to provide appropriate access to cloud-based assets.
Manage MFA, conditional access policies, and privileged identity management configurations.
Conduct periodic access reviews and entitlement certifications with department heads to validate permissions.
Oversee the security aspects of joiner, mover, and leaver processes, ensuring timely access provisioning and de-provisioning.
Perform other duties as assigned.