Cybersecurity Engineer

Cybersecurity Engineer role for designing, building, and improving security controls for enterprise information systems in Fargo, ND.

Responsibilities

• Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, IDS/IPS, SIEM, endpoint detection and response, email security, and identity protection.
• Evaluate and select security technologies; define configuration standards; create reference designs used by security operations.
• Lead incident investigation, containment, and resolution.
• Build and tune detection content, correlation rules, and automated response actions.
• Develop and maintain the Incident Response Plan; run tabletop exercises and drills; produce post-incident reports with corrective actions.
• Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards.
• Coordinate third-party penetration tests and validate remediation outcomes.
• Perform threat modeling and security design reviews for new systems and significant changes.
• Conduct security design reviews for AI services, models, agents, and integrations.
• Define and implement data protection controls for enterprise AI use, including DLP, tenant boundaries, and logging.
• Support the AI governance program with technical assessments and control recommendations.
• Build security automation and integrations to reduce manual effort, including scripting, API integrations between security platforms, and configuration as code where applicable.
• Lead medium to large projects to improve overall cybersecurity posture, including scoping, sequencing, and coordinating delivery across technical teams (prioritized by impact and cost assessment).
• Translate regulatory requirements into technical control designs, including GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, and state regulations.
• Support internal and external security audits and collaborate with internal teams on compliance and audit activities.
• Maintain security architecture documentation, configuration standards, and engineering runbooks.
• Provide technical direction to security operations staff and act as the escalation point for complex security issues.

Requirements

• Working knowledge of security frameworks and ability to translate them into technical controls, including NIST CSF 2.0, NIST SP 800-53, ISO 27001, and CIS Controls.
• Deep understanding of enterprise security domains: IAM, EDR, email and collaboration security, data protection, network security, and secure application delivery.
• Experience architecting and administering Microsoft 365 and Microsoft Entra ID, including Conditional Access, Microsoft Defender XDR, Intune, and Purview.
• Experience building and tuning detection content in SIEM/XDR, including writing queries and correlation logic.
• Proficiency with scripting and automation (e.g., PowerShell, Python) and integrating security platforms via APIs.
• Sound judgment under pressure, with the ability to direct containment decisions during an active incident.
• Strong written and verbal communication skills for technical and non-technical audiences.
• Experience securing and administering common enterprise generative AI solutions, including Microsoft Copilot and Google Gemini.

Technologies

• Firewalls; IDS/IPS
• SIEM; endpoint detection and response; XDR
• Email security; identity protection
• Microsoft 365; Microsoft Entra ID
• Conditional Access; Microsoft Defender XDR; Intune; Purview
• PowerShell; Python; API integrations
• Configuration as code
• Microsoft Copilot; Google Gemini
• GLBA Safeguards Rule; NAIC Insurance Data Security Model Law; PCI-DSS
• NIST CSF 2.0; NIST SP 800-53; ISO 27001; CIS Controls

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible schedule
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Professional development assistance
• Referral program
• Retirement plan
• Vision insurance

Education, Work Experience, and Certifications

• Bachelor’s degree or higher-level in Cybersecurity, Computer Science, IT Management, or other relevant area, or equivalent practical experience
• Years of Experience: 7
• CISSP
• Microsoft Certified: Cybersecurity Architect (SC-100)
• GCIH or GCIA (GIAC)
• Relevant vendor-specific certifications (e.g., Palo Alto Networks, Microsoft Azure Security)

Travel Requirements

• Light travel (by car or air), including overnight

Physical Demands / Working Conditions

• Ability to withstand typical office work, including periods of sitting, standing, typing, and indoor tasks near other people
• Occasionally exert up to 10 pounds of force to move objects
• Close visual acuity for preparing and analyzing data and figures, viewing a computer screen, visual inspection, and extensive reading
• Flexible work schedule to meet business needs, on-call 24x7, and on-site presence during specified or core hours
• Ability to operate standard computer hardware

Work Location

• In person
• Fargo, ND (onsite)