Note: The job is a remote job and is open to candidates in USA. Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. They are seeking a skilled and passionate Cybersecurity Engineer to strengthen and scale their security capabilities in response to an evolving threat landscape.
Responsibilities
- Develop and enhance security strategies to protect against emerging threats
- Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively
- Lead or participate in security incident handling and response, including SOC operations and DFIR
- Enforce least privilege access principles and secure network architectures
- Support AI governance initiatives, including evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations used across the organization
- Work autonomously while also thriving in a collaborative team environment
- Utilize defense-in-depth methodology to enhance and sustain a secure environment
Skills
- 4+ years of experience in dedicated information security roles
- Hands-on experience with SIEM and EDR solutions
- Expertise in security incident response and SOC operations
- Strong knowledge of least access principles and defense-in-depth methodologies
- Solid understanding of TCP/IP networking and security protocols
- Understanding of AWS cloud environments and working with related security technologies
- Excellent verbal and written communication skills, with the ability to engage technical, non-technical, and executive audiences
- Experience with vulnerability management, assessment, and remediation
- Familiarity with adversarial TTPs and attack frameworks (MITRE ATT&CK, etc.)
- Knowledge of AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats
- Experience evaluating or implementing AI governance and security controls (e.g., MCP gateways, AI access policies, behavioral monitoring for AI tools)
- Knowledge of security compliance frameworks (e.g., SOC 2, CIS, NIST 800 series, ISO 27001)
- Experience with detection engineering tools (e.g., Suricata, YARA, Sigma)
- Proficiency in Python for security automation, including threat detection and compliance workflows
Benefits
- Participation in a bonus or commission plan
- An equity grant
- Medical, dental, and vision insurance
- Paid parental leave
- Flexible time off
- A 401(k) plan with employee and company contribution opportunities
- Life and disability insurance
- Tuition reimbursement
Company Overview
Company H1B Sponsorship