Cybersecurity & Systems Lead

Design Imaging is hiring an onsite Cybersecurity & Systems Lead in Orem, UT. This hands-on role combines cybersecurity program ownership with systems administration leadership to help keep core infrastructure secure, reliable, and well-documented. You will set security standards, guide technical investigations, and lead incident response efforts while coaching the IT infrastructure team.

What you’ll own

• Own and continuously improve the organization’s technical cybersecurity program.
• Establish security standards and technical controls across infrastructure, endpoints, applications, identity, and network environments.
• Identify significant cybersecurity risks and communicate them clearly to IT and company leadership.
• Lead cybersecurity projects from initial assessment through implementation and validation.
• Provide technical leadership and day-to-day direction for systems administration personnel.
• Prioritize and coordinate systems administration work, including maintenance, upgrades, and remediation activities.
• Set standards for configuration, maintenance, documentation, and monitoring of company systems.
• Mentor systems administrators and support the development of technical capabilities.
• Help establish clear ownership, procedures, and accountability for infrastructure systems.

Incident response and technical leadership

• Develop and maintain the organization’s cybersecurity incident response plan.
• Lead technical investigation of suspected cybersecurity incidents.
• Coordinate systems administration, networking, software, and other technical resources during an incident.
• Preserve relevant logs and evidence, determine scope and impact, and guide containment, remediation, recovery, and post-incident reviews.
• Provide ongoing technical leadership, coaching, and mentorship to the IT infrastructure team.

Requirements

• Professional experience in cybersecurity, systems administration, infrastructure engineering, network engineering, or a related technical field.
• Demonstrated ability to lead technical projects and provide technical direction to other IT professionals.
• Strong knowledge of Windows Server, Active Directory, identity management, endpoints, and enterprise infrastructure.
• Strong understanding of network security including TCP/IP, DNS, firewalls, VPNs, VLANs, and network segmentation.
• Experience securing Windows and/or Linux environments.
• Experience with vulnerability scanning and vulnerability remediation.
• Working knowledge of web applications and API security.
• Understanding of common attack techniques and vulnerabilities.
• Experience with identity and access management, MFA, privileged accounts, and least-privilege principles.
• Understanding of backup, disaster recovery, patch management, monitoring, and infrastructure lifecycle management.
• Ability to analyze security findings and translate them into actionable remediation plans.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to communicate technical risks and priorities to both technical and non-technical stakeholders.
• Familiarity with cybersecurity frameworks such as NIST CSF, CIS Controls, and CIS Benchmarks.

Technologies you’ll work with

Windows Server, Active Directory, identity management, TCP/IP, DNS, firewalls, VPNs, VLANs, network segmentation, Linux, web applications, API security, MFA, backup, disaster recovery, patch management, monitoring, NIST CSF, CIS Controls, CIS Benchmarks, Python, PowerShell, Bash, C#, PHP, JavaScript

Benefits

• 401(k) + 401(k) Matching
• Dental Insurance
• Health Insurance
• HSA Matching
• Paid Time Off
• Paid Company Holidays
• Supplemental Insurance Benefits like Life, Short-Term Disability and Accident
• Employee discount
• Parental leave
• Referral program
• Life insurance

Preferred qualifications

• Previous experience as a technical lead, team lead, senior systems administrator, security engineer, or similar position.
• Experience conducting penetration tests or red-team-style security assessments.
• Experience administering and securing Microsoft Active Directory and Microsoft 365 environments.
• Experience with endpoint management.
• Experience with virtualization, backup infrastructure, storage, and server environments.
• Familiarity with SQL databases, web servers, APIs, and common web application architectures.
• Experience reviewing source code or working directly with software development teams.
• Familiarity with scripting or programming languages such as Python, PowerShell, Bash, C#, PHP, or JavaScript.
• Experience working in manufacturing or operational technology environments is a plus.

Work location: In person (Orem, UT)