Sr. Cybersecurity Engineer

McGough•Roseville, MN

2d•$130,000 - $170,000•Hybrid

About The Position

The Senior Cybersecurity Engineer designs, implements, and improves security controls protecting the organization’s systems, cloud environments, networks, applications, AI-enabled services, and data. In partnership with the Manager, Cyber Security, the role defines technical security requirements and leads design reviews across security engineering, detection and response, security architecture, AI security, and operation of the CMMC enclave. The position guides technical controls for employee AI use and internally developed AI workloads while supporting ongoing CMMC Level 2 and NIST SP 800-171 readiness with governance, risk, and compliance stakeholders. The engineer works with application, cloud, AI, infrastructure, and system owners to establish security requirements, apply threat modeling, review designs, explain tradeoffs, and provide implementable and testable security patterns. For the CMMC enclave, the role translates control obligations into technical requirements and architecture, guides implementation, verifies evidence, identifies gaps, and provides the Cybersecurity Manager with recommendations on technical priorities, dependencies, and decisions. The position provides technical direction, makes evidence visible through design reviews and control testing, and builds security capability across teams through guidance and mentorship. Work is typically performed in an office or hybrid environment using standard business and technical security tools. Occasional travel may be required for exercises, audits, conferences, vendor meetings, incident response, or organizational meetings. Physical requirements include extended sitting, lifting up to 20 pounds as needed, keyboard and mouse use, clear hearing and speech, and distinguishing colors on graphs and charts. Occasional construction jobsite visits may involve dirt, dust, uneven surfaces, outdoor weather, and extreme temperatures.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field; equivalent experience may be considered.
4–7 years of progressive experience in cybersecurity engineering, security operations, infrastructure security, cloud security, or a related technical security role.
Working knowledge of CMMC Level 2 and NIST SP 800-171 requirements, including CUI scoping, security control implementation, assessment evidence, POA&M remediation, and certification readiness activities.
Strong technical knowledge of SIEM, SOAR, EDR/XDR, vulnerability management, identity and access management, firewalls, IDS/IPS, endpoint security, cloud security controls, scripting or automation, threat detection, incident response, and secure system design.
Demonstrated expertise in cloud and identity security, including identity governance, privileged access management, conditional access, Zero Trust principles, cloud security posture management, and Microsoft Entra ID or comparable platforms.
Strong knowledge of AI application architecture, including model APIs, retrieval-augmented generation, vector databases, agents, tools, Model Context Protocol services, machine-to-machine access, and sensitive-data flows.
Knowledge of secure software development practices, application security testing, API security, secrets management, threat modeling, and secure coding.
Strong technical documentation, communication, prioritization, and project leadership skills.

Nice To Haves

7+ years of progressive experience in cybersecurity engineering, security operations, infrastructure security, cloud security, or a related technical security role.
Professional security certification such as CISSP, CISM, GIAC, GCIH, GCIA, Security+, Azure Security Engineer Associate, AWS Security Specialty, or equivalent.
Experience with security frameworks and standards such as the NIST Cybersecurity Framework, NIST NICE Framework, CIS Controls, ISO 27001, or similar governance and control models.
Experience leading AI security architecture, governance, or engineering for public AI services, developer copilots, or internally developed AI/ML workloads.
Experience supporting a CMMC Level 2 assessment.
CMMC-focused training or credentials such as CCP or CCA.

Responsibilities

Design, implement, maintain, and improve security controls across on-premises, cloud, network, endpoint, identity, application, and data environments.
Engineer cloud and identity protections, including security posture management, identity governance, privileged access management, conditional access, Zero Trust controls, and Microsoft Entra ID or comparable platforms.
Optimize security tools, configuration baselines, access controls, and automation; coordinate remediation when controls do not meet approved technical requirements.
Lead vulnerability management, prioritize findings by risk and exposure, and coordinate remediation and validation with system owners.
Improve threat detection and monitoring through log-source onboarding, detection rules, alert tuning, investigation workflows, and security automation.
Serve as a senior technical resource during security incidents, supporting investigation, containment, recovery, lessons learned, and response-playbook improvements.
Secure employee use of public AI services, developer copilots, and AI-enabled SaaS through identity-, device-, risk-, and data-aware controls.
Design and implement protections for internally developed AI workloads, including model APIs, retrieval-augmented generation pipelines, vector databases, agents, Model Context Protocol services, tools, credentials, and machine-to-machine access.
Work with application, AI/ML, and data governance teams to address sensitive-data flows, agent and tool permissions, source code and credential exposure, shadow AI, and identified AI security weaknesses.
Manage the technical security of the CMMC enclave, including CUI boundaries and data flows, in-scope assets, access and device controls, secure configurations, logging, monitoring, and vulnerability remediation.
Implement applicable CMMC Level 2 and NIST SP 800-171 technical controls and maintain supporting evidence, system security plan inputs, control descriptions, and assessment-ready artifacts.
Track technical gaps, POA&M remediation, access reviews, audit-log coverage, and assessment findings; partner with governance, risk, and compliance stakeholders on scope, assessment coordination, compliance determinations, and formal risk acceptance.
Lead security architecture and design reviews for infrastructure, cloud services, applications, AI solutions, integrations, and major technology initiatives.
Define technical security requirements for new and changing applications, cloud services, integrations, AI-enabled workflows, and infrastructure; guide owners in applying and verifying requirements.
Develop reference architectures, secure design patterns, and technical guardrails; conduct threat modeling and recommend practical risk-reduction measures.
Partner with development teams on secure software practices, application and API testing, secrets management, integration and vendor reviews, and remediation of security findings.
Guide and mentor security analysts, engineers, infrastructure teams, application teams, and AI/ML partners on technical controls and secure practices.
Lead cross-functional technical work during incidents, audits, security reviews, projects, and cybersecurity and AI security initiative implementation.
Contribute to security architecture and AI security roadmaps, control maturity plans, technology selection, and risk priorities; evaluate emerging threats and recommend improvements.
Escalate material weaknesses and provide documented technical input for formal risk-acceptance decisions.
Develop and maintain security standards, procedures, configuration baselines, technical playbooks, and control implementation documentation.
Maintain AI security standards for sanctioned use, sensitive-data handling, model and API access, agent and tool permissions, exceptions, and protection of source code, credentials, intellectual property, and customer information.
Document CMMC enclave configurations, evidence, exceptions, and technical remediation status with governance, risk, and compliance stakeholders.
Define and report measures of vulnerability remediation, detection and response coverage, AI policy effectiveness, control performance, incidents, exceptions, and audit-finding closure.
Report CMMC enclave readiness, including control status, evidence completeness, access reviews, audit-log coverage, assessment findings, POA&M progress, and risks to ongoing compliance.
Use trends and findings to recommend and track improvements to the organization’s security posture.
Participate in special projects, emergency response activities, business continuity exercises, vendor reviews, and other cybersecurity or AI security initiatives as needed.
Maintain current knowledge of cybersecurity and AI security threats, tools, techniques, and practices through training, research, industry engagement, and hands-on technical learning.