Cyber Security Engineer

We are looking for a Cyber Security Engineer to strengthen and oversee the organization’s security posture in Maryknoll, New York. This role is responsible for identifying vulnerabilities, protecting systems and networks, and guiding risk-based security practices across the environment. The ideal candidate brings strong technical judgment, hands-on security expertise, and the ability to communicate clearly with both technical teams and business stakeholders.

Responsibilities:

• Monitor and evaluate the security of systems, endpoints, and network infrastructure to identify threats and reduce exposure to risk.
• Investigate security incidents, assess potential breaches, and coordinate timely remediation efforts to restore and protect operations.
• Review firewall configurations, network activity, and monitoring outputs to help maintain a secure and resilient technology environment.
• Partner with internal teams to support patch management and strengthen security controls across Windows and macOS platforms.
• Assess third-party vendor security documentation, including SOC 2 reports, to support risk reviews during procurement and contract evaluation.
• Contribute to the development, maintenance, and enforcement of information security policies, standards, and procedures.
• Provide clear updates and recommendations to leadership, IT colleagues, and end users while handling sensitive matters with sound judgment and discretion.
• Bachelor’s degree in computer science, information technology, cybersecurity, or a related technical field.
• Certified Information Security Manager (CISM) certification is required.
• At least 5 years of experience in cybersecurity leadership, engineering, or security management roles.
• Strong analytical and technical problem-solving skills with the ability to evaluate and address complex security issues.
• Practical knowledge of Windows and macOS operating systems, network protocols, firewall technologies, and system patching practices.
• Demonstrated ability to detect, assess, and remediate cybersecurity vulnerabilities and security incidents.
• Familiarity with information security governance, compliance, and regulatory considerations; experience in nonprofit environments is a plus.
• Excellent written and verbal communication skills, with the ability to build trust across technical and non-technical audiences.