Cybersecurity Engineer
About The Position
A Cybersecurity Engineer role based in Woodinville, WA is available at Ste. Michelle Wine Estates (SMWE). The Cybersecurity Engineer is a hands-on role responsible for securing and supporting the organization's infrastructure, identity, endpoints, and security operations. This position focuses on vulnerability management and automated remediation across hybrid environments, leveraging industry-leading security, endpoint management, and IT service management platforms. The role also supports security monitoring, incident response, secure configuration management, security assessments, compliance initiatives, and continuous improvement of the organization's cybersecurity posture. Successful candidate will need to be based within commuting distance of our Woodinville, WA location. Ste. Michelle Wine Estates is the largest wine company in the Pacific Northwest, and among the largest premium wine companies in the U.S, with roots dating back to 1933. Throughout our 90+ year history, what has remained constant is our unwavering commitment to quality, service to our customers, and connection with our community. We are proud that our award-winning wines farmed in Washington are an expression of all the best things about the Pacific Northwest — the spirit of people, the abundance of the land, and the excellence-driven culture. Our distinctive portfolio of wines, including Chateau Ste. Michelle, 14 Hands, Columbia Crest, Intrinsic, Liquid Light, Northstar, and Spring Valley Vineyard, are enjoyed across the U.S. and distributed in over 100 countries.
Requirements
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent experience.
- Strong hands-on experience supporting Windows Server environments, enterprise infrastructure, and hybrid cloud environments.
- Expertise in Active Directory, Entra ID (Azure AD), IAM, authentication, authorization, and privileged access management.
- Experience with vulnerability management, endpoint security, EDR/XDR, and security monitoring platforms.
- Advanced PowerShell scripting and automation experience for infrastructure and security operations.
- Experience with endpoint management, infrastructure management, and IT service management tools (e.g., Intune, Workspace ONE, Azure Arc, AWS Systems Manager, ServiceNow, Jira).
- Strong knowledge of incident response, security operations, secure configuration, network security, and risk management.
- Working knowledge of Linux administration.
- Proven troubleshooting, problem-solving, and root cause analysis skills.
- Ability to collaborate effectively across IT and Infrastructure teams and drive remediation efforts to completion.
- Excellent communication and teamwork skills.
- History of responsible use of alcohol and other appropriate conduct, as well as fitness to be licensed, permitted, and/or certified by state and/or local regulatory bodies.
Nice To Haves
- Relevant certifications such as CISSP, CISM, CISA, GSEC, or similar preferred.
- Knowledge of ITIL, ITSM, and SDLC methodologies preferred.
Responsibilities
- Manage and secure Windows servers, directory services, identity platforms, and hybrid infrastructure.
- Troubleshoot and remediate day-to-day security and infrastructure issues across servers, identity systems, and endpoints.
- Manage vulnerability identification, prioritization, remediation, and validation using common industry-leading vulnerability management platforms such as Rapid7, Tenable, Qualys, or Microsoft Defender Vulnerability Management.
- Build and maintain automated vulnerability remediation workflows across industry-leading vulnerability management, endpoint security, device management, infrastructure management, and ITSM platforms.
- Monitor and investigate security events and endpoint detections using industry-leading endpoint detection and response (EDR/XDR) and SIEM platforms such as CrowdStrike, Microsoft Defender, SentinelOne, Palo Alto Cortex XDR, Splunk, Microsoft Sentinel, or QRadar.
- Identify, investigate, and remediate security vulnerabilities, misconfigurations, and exposure risks.
- Track CVEs and emerging threats and translate findings into actionable remediation plans.
- Harden Windows systems, directory services, endpoints, and infrastructure against security threats.
- Develop automation and scripting solutions using PowerShell and other enterprise automation tools for security and infrastructure operations.
- Support identity and access management (IAM), privileged access, authentication, and identity security initiatives.
- Participate in incident response, containment, remediation, and root cause analysis.
- Audit systems and infrastructure for secure configuration and compliance with security standards.
- Partner with Infrastructure and IT teams to implement security controls and resolve vulnerabilities.
- Support security assessments, penetration testing, risk assessments, and security audits.
- Research emerging cybersecurity threats and evaluate technologies and solutions to improve the organization's security posture.
- Support SOC 2, PCI DSS 4.0, CIS, HIPAA, and other applicable security and compliance requirements.
- Support vendor security assessments and GRC activities as needed.
Benefits
- Health Care Coverage including medical, dental, vision & prescription – eligible on date of hire for full-time employees
- Paid Vacation & Holidays
- 401(k) with Employer Match
- Employee Wine Discounts
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
Associate degree
