Cybersecurity Engineer, Bonterra

• Are you passionate about staying ahead of evolving cyber threats? Do you thrive in fast-paced environments, love hardening systems, and continuously seek to improve security posture?
• 3–5 years of experience in technical security roles, ideally with a background in systems, infrastructure, or DevSecOps
• Hands-on experience with:
• Security tools such as SIEM (e.g., Sentinel, Splunk), XDR (e.g., Microsoft Defender XDR, CrowdStrike Falcon), IDS/IPS, and cloud and SaaS security posture management platforms
• Vulnerability management platforms (e.g., Tenable, Qualys)
• Cloud environments (especially AWS)
• Strong understanding of common security frameworks and compliance standards (e.g., NIST CSF, CIS Controls, ISO 27001, SOC 2, PCI, HIPAA), with experience applying them to guide control design, risk mitigation, and audit readiness
• Ability to communicate complex topics clearly and confidently across technical and non-technical stakeholders
• Sharp judgment in balancing risk mitigation with operational impact

Desirable

• We’re looking for a proactive Cybersecurity Engineer who’s technically sharp, process-driven, and excited to help secure modern cloud-first environments
• Report to the Director of Cybersecurity and support security operations across Bonterra’s distributed environment
• Assist with incident response by maintaining IR playbooks and leveraging security technologies—such as SIEM, XDR, email security, and identity protection tools—to triage, investigate, and remediate incidents
• Support vulnerability management efforts, including tracking existing and newly discovered vulnerabilities, generating reports on vulnerability trends and exposure, advising operational teams on appropriate remediation actions, validating fixes, tracking remediation progress, and reporting on residual risk
• Assist the Senior Cybersecurity Engineer with internal and third-party network penetration testing efforts, including scoping, planning, coordination, execution support, remediation validation, and documentation
• Contribute to the implementation and continuous improvement of security controls across user devices, servers, cloud infrastructure, and SaaS environments. Responsibilities include system hardening, validating configurations against security benchmarks (e.g., CIS), and aligning with frameworks like NIST CSF
• Support security compliance and audit activities, including control validation, evidence gathering, and gap remediation (e.g., SOC 2, ISO, PCI)
• Contribute to the development and refinement of incident response, disaster recovery, and business continuity plans, ensuring they're actionable, tested, and aligned with business risk
• Support threat protection efforts by assisting with endpoint threat detection, identifying and responding to malware or viruses, and monitoring systems for signs of compromise or suspicious activity
• Develop and deliver reporting that correlates threat data from multiple sources to support detection, response, and risk decisions
• Research and evaluate new security tools and technologies, and assist in their implementation and integration into the broader technology environment

• End Date: June 23, 2025