CyberSecurity Engineer

Paul Bunyan Communications•Bemidji, MN

About The Position

The CyberSecurity Engineer is responsible for protecting the company’s networks, systems, and data from internal and external threats. This position designs, implements, and manages security tools and procedures to safeguard both internal operations and member-facing services. The CyberSecurity Engineer works closely with IT, Business IT, and Network Operations to ensure a strong and proactive security posture across all environments.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field. An equivalent combination of education and relevant experience may be substituted for stated education requirements.
High school diploma or equivalent credential
3+ years experience in cybersecurity, information technology, network security, or a related IT field
Knowledge of vulnerability management and scanning tools
Strong understanding of the NIST and CIS frameworks
Proficiency administering Linux and Windows servers
Excellent attention to detail and accuracy
Strong organizational and time management skills
Ability to think critically and solve problems effectively
Strong written and verbal communication skills
MN valid driver’s license

Nice To Haves

Related industry experience
Experience with SIEM, ITDR, ISPM, Patch Management and EDR tools
Strong understanding of TCP/IP, routing, switching, VLANs, VPNs, NAT, ACLs, DNS, and network protocols

Responsibilities

Develop, implement, and maintain cybersecurity standards, procedures, and controls to protect company and member data and support compliance with applicable cybersecurity and data protection requirements.
Monitor network, system, and security activity to identify and analyze potential threats and security events, and coordinate timely incident response and remediation activities.
Proactively identify cybersecurity vulnerabilities, including applicable CVEs, and work with responsible equipment and system owners to prioritize and ensure timely remediation, patching, and risk mitigation.
Administer and maintain cybersecurity tools in collaboration with internal IT teams, including endpoint detection and response (EDR), security information and event management (SIEM), group policies, and security awareness training platforms.
Maintain an accurate inventory of equipment and devices connected to enterprise and production networks and support secure configuration, access controls, patch management, and technology lifecycle management.
Conduct regular vulnerability assessments, penetration testing, system audits, and other security reviews to identify risks and recommend appropriate mitigation strategies.
Design, evaluate, and maintain secure network architectures for internal operations and member-facing systems, working closely with IT teams to ensure security is incorporated into system design and ongoing operations.
Collaborate across departments to promote secure technology practices, cybersecurity awareness, and adherence to established security policies and procedures.
Provide clear and timely communication of cybersecurity risks and issues to both technical and non-technical audiences.
Prepare and deliver cybersecurity updates and presentations to the Board of Directors, including information regarding organizational risk, threat trends, security events, and key cybersecurity initiatives.
Maintain detailed and current documentation related to cybersecurity risks, network-connected assets, security tools, assessments, incidents, and remediation activities.
Stay informed about emerging cybersecurity threats, technologies, vulnerabilities, regulatory requirements, and industry best practices, and recommend improvements to strengthen the Cooperative's security posture.
Maintain confidentiality and exercise sound judgment when handling sensitive company, member, and cybersecurity information.
Demonstrate continual development of knowledge and capabilities in threat detection, prevention, vulnerability management, and incident response.
Perform other duties as assigned or deemed necessary by the Chief Technology Officer or the CEO & General Manager.