Cybersecurity Engineer

Cybersecurity Engineer role focused on designing and operating security controls to protect NODAK INSURANCE COMPANY’s information assets in Fargo, ND (onsite).

Responsibilities

• Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, IDS/IPS, SIEM, endpoint detection and response, email security, and identity protection.
• Evaluate and select security technologies; define configuration standards and produce reference designs used by security operations.
• Lead investigation, containment, and resolution of security incidents.
• Build and tune detection content, correlation rules, and automated response actions.
• Develop and maintain the Incident Response Plan; run periodic tabletop exercises and drills.
• Produce post-incident reports with assigned corrective actions.
• Own the vulnerability management program: scan coverage, risk-based prioritization, and remediation standards.
• Coordinate third-party penetration tests and validate remediation.
• Perform threat modeling and security design reviews for new systems and significant changes.
• Conduct security design reviews for AI services, models, agents, and integrations.
• Define and implement data protection controls for enterprise AI use, including data loss prevention, tenant boundaries, and logging.
• Support AI governance with technical assessments and control recommendations.
• Build automation and integrations to reduce manual security effort, including scripting, API integrations between security platforms, and configuration as code where applicable.
• Lead medium to large projects to improve overall cybersecurity posture; define scope, sequence work, and coordinate delivery across technical teams.
• Prioritize projects using impact and cost assessment.
• Translate regulatory requirements into technical control designs, including GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, and state regulations.
• Support internal and external security audits; collaborate with internal teams on compliance and audit activities.
• Build and maintain security architecture documentation, configuration standards, and engineering runbooks.
• Provide technical direction to security operations staff and act as escalation point for complex security issues.

Requirements

• 7+ years of relevant experience.
• Working knowledge of common security frameworks and ability to translate them into technical controls (e.g., NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Controls).
• Deep understanding of enterprise security domains: identity and access management, endpoint detection and response, email and collaboration security, data protection, network security, and secure application delivery.
• Experience architecting and administering Microsoft 365 and Microsoft Entra ID, including Conditional Access, Microsoft Defender XDR, Intune, and Purview.
• Experience building and tuning detection content in SIEM or XDR platforms, including writing queries and correlation logic.
• Proficiency with scripting and automation (e.g., PowerShell, Python) and integrating security platforms via APIs.
• Sound judgment under pressure, including ability to direct containment during active incidents.
• Strong written and verbal communication skills for technical and non-technical audiences.
• Experience securing and administering common enterprise generative AI solutions, including Microsoft Copilot and Google Gemini.
• Bachelor’s degree or higher in Cybersecurity, Computer Science, IT Management, or other relevant area, or equivalent.

Technologies

• NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Controls
• Microsoft 365, Microsoft Entra ID, Conditional Access, Microsoft Defender XDR, Intune, Purview
• SIEM, XDR
• PowerShell, Python, APIs
• Microsoft Copilot, Google Gemini
• Firewalls, intrusion detection/prevention systems (IDS/IPS)
• Endpoint detection and response, email security, identity protection
• Data loss prevention, tenant boundaries, logging, configuration as code
• GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS
• Microsoft Certified: Cybersecurity Architect (SC-100)

Education, Work Experience, and Certifications

• CISSP
• Microsoft Certified: Cybersecurity Architect (SC-100)
• GIAC Certified Incident Handler (GCIH) or GIAC Certified Intrusion Analyst (GCIA)
• Relevant vendor-specific certifications (e.g., Palo Alto Networks, Microsoft Azure Security)

Travel Requirements

• Light travel by car or air, including overnight

Physical Demands / Working Conditions

• Ability to perform typical office work including periods of sitting, standing, typing, and working indoors in proximity to others.
• Occasionally exert up to 10 pounds of force to move objects.
• Close visual acuity for data preparation and analysis, computer screen viewing, visual inspection, assembly of parts, and extensive reading.
• Flexible schedule to meet business needs; on-call 24x7; on-site during specified or core hours.
• Ability to operate standard computer hardware.

Compensation: USD 93,798 - 125,064 per year.