Cybersecurity Engineer

Summary

This position is responsible for designing, building, and improving the security controls that protect the organization’s information assets. The role owns security architecture decisions, evaluates and deploys security technologies, leads incident investigations, and sets the technical standards that the broader technology team operates against. This role requires deep technical expertise across enterprise security domains, sound risk judgment, and the ability to work collaboratively across various departments.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Security Architecture and Engineering: Design, build, and deploy cybersecurity infrastructure and controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), Security Information and Event Management (SIEM) solutions, endpoint detection and response, email security, and identity protection. Evaluate and select new security technologies, define configuration standards, and produce the reference designs that security operations staff administer against.
• Threat Detection and Incident Response: Lead the investigation, containment, and resolution of security incidents. Build and tune detection content, correlation rules, and automated response actions. Develop and maintain the Incident Response Plan, conduct periodic tabletop exercises and drills, and produce post-incident reports with assigned corrective actions.
• Vulnerability and Risk Management: Own the vulnerability management program, including scan coverage, risk-based prioritization, and remediation standards. Coordinate third-party penetration tests and validate remediation. Perform threat modeling and security design reviews for new systems and significant changes.
• AI and Emerging Technology Security: Perform security design reviews of AI services, models, agents, and integrations. Define and implement data protection controls for enterprise AI use, including data loss prevention, tenant boundaries, and logging. Support the AI governance program with technical assessments and control recommendations.
• Automation and Engineering Practices: Build automation and integrations that reduce manual security effort, including scripting, API integrations between security platforms, and configuration as code where applicable.
• Project Management: Lead medium to large projects related to improving overall cybersecurity posture. Define scope, sequence work, and coordinate delivery across technical teams. Projects will be prioritized based on impact and cost assessment.
• Compliance and Auditing: Translate regulatory requirements (e.g., GLBA Safeguards Rule, NAIC Insurance Data Security Model Law, PCI-DSS, state regulations) into technical control designs. Support internal and external security audits and collaborate across internal teams on compliance and audit-related activities.
• Documentation and Technical Leadership: Build and maintain the security architecture documentation, configuration standards, and engineering runbooks. Provide technical direction to security operations staff and serve as the escalation point for complex security issues.

Essential Competencies and Skills

• Working knowledge of common security frameworks and the ability to translate them into technical controls (e.g., NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Controls).
• Deep understanding of enterprise security domains including identity and access management, endpoint detection and response, email and collaboration security, data protection, network security, and secure application delivery.
• Experience architecting and administering Microsoft 365 and Microsoft Entra ID, including Conditional Access, Microsoft Defender XDR, Intune, and Purview.
• Experience building and tuning detection content in a SIEM or XDR platform, including writing queries and correlation logic.
• Proficiency with scripting and automation (e.g., PowerShell, Python) and integrating security platforms through APIs.
• Sound judgment under pressure, with the ability to direct containment decisions during an active security incident.
• Strong written and verbal communication skills, capable of explaining complex security concepts to technical and non-technical audiences.
• Experience securing and administering common enterprise generative AI solutions such as Microsoft Copilot and Google Gemini.

Education, Work Experience, and Certifications

• Bachelor’s degree or higher-level in Cybersecurity, Computer Science, IT Management, or other relevant area, or equivalent practical experience
• Years of Experience: 7
• Certified Information Systems Security Professional (CISSP)
• Microsoft Certified: Cybersecurity Architect (SC-100)
• GIAC Certified Incident Handler (GCIH) or GIAC Certified Intrusion Analyst (GCIA)
• Relevant vendor-specific certifications (e.g., Palo Alto Networks, Microsoft Azure Security)

Travel Requirements

• Light travel (by car or air) including overnight

Physical Demands/Working Conditions

• Be able to withstand typical office work that includes periods of sitting, standing, typing, etc. indoors while potentially performing job tasks in close proximity to other people.
• Must be able to exert up to 10 pounds of force occasionally to move objects.
• Requires close visual acuity to perform an activity such as preparing and analyzing data and figures, viewing a computer screen, visual inspection, assembly of parts, and extensive reading.
• Ability to have a flexible work schedule to meet business needs, be on call 24x7, and be at work on-site during specified or core hours.
• Must be able to operate standard computer hardware.

Nodak Insurance Company complies fully with all federal, state, and local employment laws and shall provide equal employment and advancement opportunities for all persons regardless of race, color, creed, religion, national origin, sex, sexual orientation, age, the presence of any mental or physical disability, status with regard to public assistance or marriage, or any other category protected by local, state, or federal law.