Cybersecurity Engineer

SHINE Technologies LLC•Janesville, WI

14h•$124,000 - $140,000

About The Position

SHINE Technologies is seeking a Cybersecurity Engineer to provide technical leadership in the design, installation, operation, servicing, and maintenance of multi-user information security systems. The role supports SHINE’s operational security function by developing, maintaining, and advancing the company’s security posture to protect corporate assets. This is a hands-on technical specialist position involving complex work to establish security systems such as SIEM and data protection solutions. The Engineer provides technical consulting and support for security systems, identifies and mitigates vulnerabilities and threats, responds to security incidents, conducts risk assessments, and helps implement security policies and controls. The position also supports employee security awareness, evaluates security advisories, investigates incidents and attacks, and creates technical documentation for shared, networked, and multi-user information security systems. The base salary range is $124,000–$140,000 per year, plus a comprehensive compensation package. Salary ranges are determined by role, level, and location.

Requirements

Bachelor’s degree in business administration or a related field, or a high school diploma/general education diploma and four years of relevant experience in lieu of a bachelor’s degree.
At least 3 years of experience in a cybersecurity engineering role.
At least 2 years of experience working in at least one of these regulatory settings: ISO 27001, SOX, CMMC, or DFARS.
Excellent interpersonal and communication skills, with the ability to operate in a cross-cultural, complex matrix environment and build consensus across functions.
High degree of initiative and dependability, and ability to work with little supervision while adapting to change.
Proven ability to work in a fast-paced, cross-functional team environment.
Ability to perform the essential functions of the position satisfactorily, with reasonable accommodations available upon request absent undue hardship.
Eligibility to qualify for access to information subject to U.S. Export Controls; eligibility may also depend on meeting Nuclear Regulatory Commission requirements for access to Safeguards Information, typically including pre-employment drug screening, fingerprinting, and a criminal background check.

Nice To Haves

Hands-on experience with SIEM implementation and administration.
Information security experience in a public or private cloud infrastructure environment, such as Azure or AWS.
Completion of, or coursework toward, information security certifications.

Responsibilities

Provide hands-on information security technical consulting to technical teams integrating shared, centralized, and/or networked systems.
Search for network vulnerabilities and threats, and conduct regular scans to identify and address security weaknesses.
Respond to security breaches, conduct root cause analysis, and implement measures to prevent recurrence.
Perform risk assessments and implement risk mitigation strategies.
Conduct employee training on security best practices, including phishing and social engineering awareness.
Create and update security policies, procedures, and protocols, and ensure they are enforced across the organization.
Stay informed about current cybersecurity threats, trends, and technologies.
Assist with the setup, secure deployment, and management of information security systems, including virus, spyware and adware detection, spam filtering, content control, website blocking, intrusion detection, and intrusion prevention systems.
Evaluate information system bug reports, security exploit reports, and other security notices, and recommend precautionary measures to management and technical staff as needed.
Serve as the primary technical support liaison for anti-virus systems, intrusion detection systems, firewalls, data loss prevention systems, and other deployed security systems.
Run or collaborate on vulnerability identification software and related tools to identify configuration errors, needed software fixes and patches, and other security-related changes.
Compile, maintain, and document software used to trace and investigate attacks on SHINE systems.
Provide technical consulting for information security incident investigations and forensic technical analyses.
Interpret information security policies, standards, and other requirements for internal information systems and assist with their implementation.
Redesign and reengineer information-handling processes to protect information from unauthorized disclosure or use, inappropriate modification, premature deletion, and unavailability.
Develop technical documentation describing deployment, configuration, and management of shared, networked, and multi-user information security systems.