Note: The job is a remote job and is open to candidates in USA. SoTalent is seeking a Staff Cyber Security Engineer to strengthen security across enterprise technology environments. The role focuses on conducting security assessments and threat analyses, guiding secure architecture and technology adoption, developing security standards and documentation, and providing technical leadership and mentorship.
Responsibilities
- Perform end-to-end security assessments and threat analyses for new and existing technology initiatives
- Evaluate system architectures, applications, networks, cloud environments, and enterprise platforms to identify security risks and recommend mitigation strategies
- Partner with business, engineering, infrastructure, and security teams to ensure cybersecurity requirements are embedded throughout project lifecycles
- Provide expert guidance on security architecture, design principles, and control implementation
- Develop security recommendations, standards, best practices, and governance documentation to support secure technology deployments
- Create and review security diagrams, reference architectures, and technical documentation that communicate security controls effectively
- Collaborate with stakeholders to balance business objectives, operational requirements, and cybersecurity risks
- Advocate for cybersecurity initiatives and communicate security requirements clearly to both technical and non-technical audiences
- Support continuous improvement efforts through security reviews, knowledge sharing, mentorship, and technical leadership
Skills
- Remote - Candidates must resides in New York
- Remote (Continental U.S.) with occasional travel
- 8+ years of experience designing, implementing, or advising on cybersecurity solutions across enterprise environments
- 8+ years of experience working with business and technical teams to identify and mitigate cybersecurity risks
- Strong understanding of common threats and vulnerabilities across network, cloud, web, application, endpoint, and enterprise environments
- Experience guiding projects through security reviews and ensuring security requirements are understood and implemented effectively
- Knowledge of industry security standards and frameworks, including OWASP Top 10, CWE, and SANS security best practices
- Advanced expertise in at least one cybersecurity domain, such as:
- Network Security
- Cloud Security
- Application Security
- Endpoint Security
- Infrastructure Security
- Security Operations
- Excellent problem-solving and analytical skills with the ability to evaluate complex security challenges
- Strong communication and presentation skills, capable of translating technical concepts for diverse audiences
- Experience developing security standards, policies, architecture guidelines, or security best practices
- Proficiency with architecture and diagramming tools used to document secure designs
- Strong organizational skills with the ability to manage multiple priorities and projects simultaneously
- Demonstrated ability to mentor team members and contribute to a collaborative, high-performing culture
- Hands-on experience performing threat modeling and threat analysis using established frameworks such as MITRE ATT&CK or similar methodologies
- Familiarity with cybersecurity frameworks and control standards including:
- NIST Cybersecurity Framework (CSF)
- CIS Critical Security Controls
- Cloud Security best practices and governance frameworks
- Understanding of data protection, privacy, compliance, and regulatory requirements across regulated industries
- Strong knowledge of cloud computing models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
- Experience working across Cybersecurity Engineering, Security Operations, Incident Response, Risk Management, Compliance, and Governance functions
- Ability to balance strong security practices with operational efficiency and business objectives
- Experience working in large-scale, complex, or rapidly evolving technology environments
- Relevant cybersecurity certifications are a plus but not required
Benefits
- Remote work for candidates residing in New York; work setting is remote within the Continental U.S.
Company Overview