Cybersecurity Engineer

Role Objective

Design and continuously improve cybersecurity controls and detection across enterprise and cloud environments. Proactively mitigate risks through threat detection, vulnerability management, and secure architecture. Monitor, investigate, and respond to incidents using automation and analytics to maintain a resilient security posture.

Essential Functions and Responsibilities

• Detect, investigate, and respond to security threats
• Monitor security platforms and lead incident response activities, including analysis, containment, recovery, and documentation of findings
• Engineer and enhance enterprise security controls
• Architect, design, implement, and continuously improve security controls across infrastructure, endpoints, applications, cloud, and identity environments
• Perform threat, vulnerability, and risk analysis
• Conduct root cause investigations, forensic reviews, and vulnerability assessments; drive remediation to reduce organizational risk
• Advance detection and automation capabilities
• Develop and tune detection logic and automate workflows (e.g., SOAR, scripting) to improve threat identification, response speed, and operational efficiency
• Optimize security data, analytics, and tooling
• Architect, integrate and enhance telemetry pipelines and leverage AI/ML-enabled tools, behavioral analytics, and threat intelligence to strengthen detection and prioritization
• Strengthen identity and access security
• Support IAM and PAM controls, enforcing least-privilege access, authentication standards, and access governance processes
• Support compliance, governance, and third-party risk
• Participate in audits, validate control effectiveness, maintain security standards, and assess vendor security practices
• Partner across the business to embed security
• Collaborate with infrastructure, development, and business teams to integrate security into system design, cloud initiatives, and enterprise projects; contribute to continuous improvement and stay current on emerging threats

education and Experience

• Bachelor’s degree in cybersecurity, computer science, information technology, or a related field preferred
• Five (5) years of Information Technology experience, with at least three (3) years of experience supporting security operations, incident response, vulnerability management, identity and access management, or privileged access management required
• Experience implementing, administering, and optimizing security technologies, including SIEM, XDR, SOAR, cloud security, IAM/PAM, and vulnerability management platforms; familiarity with automation, scripting (e.g., PowerShell, Python, KQL), and API-driven integrations preferred
• Relevant certifications preferred but not required, such as CISSP, CCSP, GCIH, GCIH, SC-200, or equivalent certifications in cloud security, incident response, detection engineering, identity security, or security architecture

Supervision/Coordination

• Ability to coordinate a team to resolve issues quickly and satisfactorily
• Coordinates tasks and promotes/adheres/enforces policies and procedures
• Gives teams feedback
• May need to coordinate work of contractor teams to fulfill projects or meet deadlines
• This role does not directly supervise other team members

Travel Requirements

FLSA Status

Compensation & Benefits

The expected starting pay for this role is between 83,800.00 – 115,300.00 per year. Within this range, an offer will depend on factors such as level of experience and technical competencies relevant to this specific role, as well as internal equity considerations. In addition to base pay, all GOJO team members are bonus eligible. Click Here for a comprehensive list of benefits we offer including 401(k) match, parental leave, and onsite well-being care.