Cybersecurity Engineer

Dscout

5d•Remote

About The Position

Dscout is seeking a Cybersecurity Engineer to join its Cybersecurity team, reporting to the VP, Compliance and Information. The role focuses on reducing risk across Dscout’s SaaS environment and internal IT systems by planning and implementing cybersecurity controls, supporting security operations, monitoring threats, and ensuring controls continue to operate effectively over time. The engineer will work closely with Engineering to integrate security throughout the software development lifecycle, secure AWS infrastructure, improve monitoring and auditability, respond to incidents, and help develop security policies, processes, and awareness programs. The position is remote-first, with hiring unavailable in Montana, Hawaii, Alaska, and Washington DC.

Requirements

At least 3 years of security experience.
Experience working with developers on security reviews and providing recommendations to manage risk.
Strong understanding and practical use of the OWASP Top 10 for web and AI.
Experience securing AWS cloud environments and infrastructure-as-code solutions such as Terraform.
Ability to implement security monitoring tools such as Datadog, identify relevant scenarios, and ensure proper logging.
Experience responding to cyber attacks and threats, including bots, account compromise, data leakage, and infected computers.
Strong knowledge of cloud computing environments.
Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
Experience documenting and implementing security policies and processes.
Good communication, documentation, and presentation skills.
Bachelor's degree preferred.
Limitless curiosity and a strong interest in understanding human behavior and relevant technologies.

Nice To Haves

Knowledge of security frameworks and standards such as ISO 27001, NIST, or SANS.
Experience with HITRUST and/or SOC 2 certification.
CISSP, CCSP, or GIAC security certification.

Responsibilities

Lead efforts to build security into the Dscout SaaS environment, including throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls that protect the SaaS environment, including security practices for AWS resources such as VPCs, EC2 instances, and containers.
Enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and improving logging and auditability with Engineering.
Assess evolving threats and recommend risk mitigations, including providing weekly threat intelligence reports.
Work with Engineering to analyze, contain, and mitigate cyber attacks and related incidents.
Perform vulnerability monitoring and ensure remediation where appropriate.
Participate in developing security policies and processes.
Assist with third-party risk reviews.
Recommend ongoing improvements to security controls.
Assist in developing security programs and promoting security awareness.