Cybersecurity Engineer III

The Cybersecurity Engineer III designs, implements, and maintains advanced security controls to safeguard the organization’s information systems. This onsite role supports security operations and integration across identity, MFA, phishing protection and reporting, data loss prevention, and incident monitoring.

Location

Louisville, CO (onsite)

Compensation

USD 122,109 - 167,898 per yearly

Your actual base compensation will be determined on a case-by-case basis and may vary based on job-related knowledge and skills, education, experience, internal equity and market competitiveness.

Key Responsibilities

• Administer the Identity and Access Management (IAM) platform, including user access management and ongoing platform maintenance.
• Maintain on-prem hardware hosting IAM platforms and plan and execute migration off end-of-life hardware and software.
• Administer on-prem multi-factor authentication (MFA) implementations, including renewal of token license keys.
• Own enterprise-wide MFA configuration and deployment, including the Duo admin portal, policies, and enrollment.
• Administer an email phishing security platform, including tuning, maintenance, and updates for phishing analysis and reporting.
• Maintain enterprise phishing reporting functionality and deploy updates as needed.
• Lead phishing simulation and security awareness training, including campaign design, scheduling, and reporting.
• Build, tune, and administer data loss prevention (DLP) policies.
• Develop and maintain security policies, procedures, and documentation.
• Monitor and respond to security incidents and alerts, providing technical support and troubleshooting.
• Collaborate with cross-functional teams to integrate security best practices into system designs and deployments.
• Document operational procedures and institutional knowledge in writing to support continuity of the team.

Required Qualifications

• Bachelor’s degree in a related field (or equivalent work experience in lieu of degree, or a Master’s plus 3 years experience).
• Typically 5+ years of related experience.
• Certifications: (1 or more required) GIAC, network technology certifications such as CCNP, or SANS level 300 courses.

Technologies and Tools

• Encryption; IDS/IPS
• MFA: Duo admin portal, Duo policies, RSA SecurID, Okta MFA
• IAM and privileged access management: Identity and Access Management (IAM), privileged access management tools, CyberArk, BeyondTrust, Okta
• Phishing security and training: Cofense, KnowBe4, Proofpoint, phishing email security platform, phishing analysis and reporting, phishing simulation, security awareness training program
• DLP and cloud security administration: Microsoft Purview, Microsoft Azure, Microsoft 365 data loss prevention, Microsoft 365 data loss prevention, data loss prevention (DLP)
• Scripting/automation: Python, PowerShell, Bash
• Certifications: GIAC, CCNP, SANS level 300 courses, CCSP, CISA, CISM, CISSP

Preferred Qualifications

• Hands-on experience administering IAM platforms such as CyberArk, BeyondTrust, Okta, or comparable privileged access management tools.
• Experience administering MFA platforms such as RSA SecurID, Cisco Duo, Okta MFA, or comparable MFA systems.
• Experience with enterprise-scale MFA deployment.
• Experience with phishing analysis and simulation platforms such as Cofense, KnowBe4, Proofpoint, or comparable tools.
• Experience designing and running security awareness training and phishing simulation programs.
• Experience with Microsoft Purview, Microsoft Azure, or Microsoft 365 data loss prevention and security administration.
• Certifications: CCSP, CISA, CISM, CISSP, or equivalent.
• Proficiency in scripting languages such as Python, PowerShell, or Bash for automation of security tasks.
• Strong problem-solving skills, attention to detail, and excellent communication and teamwork skills.

Benefits

• Medical, dental, and vision plans
• 401(k) with 150% match up to 6%
• Life insurance
• 3 weeks paid time off

Education

Bachelor’s degree in a related field