Note: The job is a remote job and is open to candidates in USA. BNSF Railway is a major freight railroad supporting the movement of essential products across North America. The Cybersecurity Engineer I/II will support vulnerability and patch management by running scans, tracking and prioritizing vulnerabilities, coordinating patch deployments, and assisting with security operations, compliance, and automation initiatives.
Responsibilities
- Run vulnerability scans using tools such as Nessus, Qualys, or similar platforms under the guidance of senior engineers
- Track, triage, and document vulnerabilities across enterprise systems, cloud environments, and applications
- Support risk prioritization efforts by researching CVEs and understanding their potential impact
- Learn to generate vulnerability reports and metrics for team review
- Coordinate and track patch deployment across servers, endpoints, and network devices
- Monitor patch status dashboards and help follow up on outstanding or failed patch cycles
- Support testing of patches in non-production environments before broader rollout
- Maintain patch schedules and documentation in collaboration with IT and DevOps teams
- Contribute to maintaining runbooks and procedures for vulnerability and patch workflows
- Support compliance-related documentation efforts (e.g., NIST, SOX) as they relate to patch and vulnerability posture
- Collaborate with SOC and IT teams to ensure patching aligns with incident response and threat intel priorities
- Participate in team meetings, threat briefings, and ongoing security education
- Develop beginner-level scripting skills (Python or PowerShell) to help automate repetitive vulnerability and patch tasks
- Gain exposure to SIEM platforms and security dashboards used to monitor patch compliance
Skills
- Authorized to work in the US
- Minimum 2 years of experience in cybersecurity engineering or related roles
- Basic understanding of common vulnerability concepts (e.g., CVEs, CVSS scores, patch cycles)
- Familiarity with operating systems (Windows and/or Linux) at a foundational level
- Eagerness to learn, ask questions, and grow in a structured team environment
- Bachelor's degree or higher in Computer Science, Cybersecurity, Information Technology, or related field
- Able to work now and in the future without BNSF's assistance (whether monetary, through sponsorship, or otherwise) in obtaining, maintaining, or extending employment authorization (including H-1B, STEM OPT/CPT, or TN nonimmigrant status)
- Entry-level certifications such as CompTIA Security+, CompTIA IT Fundamentals (ITF+), or any vendor-specific cloud/security fundamentals cert (AWS, Azure, Google)
- Exposure to CEH, OSCP study materials, or similar is a plus
- Basic understanding of network concepts: IP addresses, ports, firewalls, and how traffic flows
- Some exposure to vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS)
- Awareness of patch management concepts and why timely patching matters
- Introductory scripting ability in Python, PowerShell, or Bash (even coursework-level experience counts)
- Exposure to cloud environments (AWS, Azure, or GCP)
- Strong attention to detail
- Good written and verbal communication
- Ability to document clearly
- Collaborative mindset and comfort working across teams
- Proactive attitude: you ask questions, take notes, and follow through
- Interest in staying current on cybersecurity news and emerging threats
Benefits
- An industry-leading 401(k) and renowned Railroad Retirement program.
- A range of robust health care options for you and your dependents (including domestic partners), including medical, dental, vision, telemedicine, mental health, cancer support, and high-quality care network options.
- Health care spending accounts (HSA) with employer contributions, as well as life and disability insurance, provided at no cost.
- Family benefits including parental, pediatric and family building support, adoption and surrogacy reimbursement, and dependent care spending account (with employer match).
- Access to discounts on travel, gym memberships, counseling services and wellness support.
- Annual bonus (Incentive Compensation Program)
- Generous leave / time off policies.
- Full-time remote work from anywhere within the contiguous 48 states of the United States.
- Travel expenses for business needs will be covered by BNSF.
- Experienced engineers will mentor you as you help protect critical infrastructure.
- Resources and tools to help you reach your full potential.
Company Overview
Company H1B Sponsorship