Cybersecurity Engineer

PWCampbell•Pittsburgh, PA

About The Position

We are seeking to add a Cybersecurity Engineer to our growing and talented design-build, retail branding and technology solutions firm. This position reported to the IT Manager and is responsible for a wide variety of security elements, including implementation, maintenance, change control, and monitoring of the company's systems, including security platforms, PCs, printers, servers, mobile devices, applications, cloud environments, email, and networking. You will work closely with the IT Manager and CIO to identify security requirements and implement appropriate measures that align with our SOC2 compliance initiatives. Tasks include developing and implementing security improvements, resolving security incidents, spearheading network and system monitoring and testing, backup and disaster recovery testing, SOC2 compliance documentation, and developing and documenting SOPs. PWCampbell is a 116 year old, fourth generation, family owned company with a stellar reputation. We are the best at what we do, work hard, enjoy our work and treat people right. We expect future team members in this position to own the desired skills in order to be successful and best represent our company as a leader in quality and service

Requirements

Bachelor's degree or relevant experience, preferably in System Engineering or Information Security
5+ years of demonstrated experience in cybersecurity
Proficient in Windows Server, Microsoft Azure, Microsoft 365, and VMWare.
Understanding of networking security and Microsoft Domain security.
Strong interpersonal, communication, and facilitation skills.
Understanding of the latest security principles, techniques, and protocols.
Ability to adapt to changing IT and security technologies.
General understanding of SOC2, NIST, ISO, and/or CIS.

Responsibilities

Develop, implement, maintain, manage, and monitor security measures for the protection of computer systems, devices, network equipment, data, email, and cloud environments.
Continual review and improvement of the company's systems.
Daily monitoring of all security platforms to ensure the integrity of the network and systems.
Document standard operation procedures and protocols.
Manage change control for IT systems
Review security of new systems and software and provide recommendations.
Perform vulnerability scanning and mitigation for network devices, and equipment.
Review current configurations of existing infrastructure and suggest improvements.
Comprehensive reporting of all security incidents.
Lead annual penetration testing initiatives.
Assist with non-security related IT projects and upgrades.
This position will be included on the Infosec, Backup and Disaster Recovery, and Change Management Committees.
Other duties as assigned by manager.