Cyber Security Engineer

Job DescriptionJob DescriptionWe are looking for a Cyber Security Engineer to strengthen and oversee the organization’s security posture in New York. This role is suited to an experienced, detail-oriented individual who can assess risk, guide security practices, and protect systems across a mixed technology environment. The ideal candidate brings strong judgment, technical depth, and the ability to communicate clearly with stakeholders while handling sensitive matters with discretion.

Responsibilities:
• Lead day-to-day security efforts by identifying vulnerabilities, analyzing threats, and coordinating timely remediation activities across systems and networks.
• Evaluate the security of Windows and macOS environments, including patch management practices, endpoint protections, and configuration standards.
• Monitor network activity and security controls such as firewalls and related tools to help prevent unauthorized access and reduce operational risk.
• Investigate potential incidents, determine the scope of exposure, and drive response actions to contain and resolve security issues effectively.
• Review third-party security documentation, including SOC 2 reports, to support vendor risk assessments during contracting and procurement processes.
• Help develop, maintain, and reinforce information security policies, standards, and procedures in alignment with regulatory and organizational requirements.
• Partner with IT teams, leadership, and internal users to communicate security recommendations, report findings, and support informed decision-making.
• Contribute technical and analytical expertise to strengthen monitoring capabilities, improve risk visibility, and support ongoing security program maturity.

• Bachelor’s degree in computer science, information technology, cybersecurity, or a closely related field, experience can replace the degree requirement.

• Certified Information Security Manager (CISM) certification or similar is required.

• At least 5 years of experience leading or managing cybersecurity initiatives.

• Strong analytical and technical problem-solving abilities with the capacity to assess and address complex security concerns.

• Working knowledge of Windows and macOS operating systems, network protocols, firewall technologies, and system patching practices.

• Demonstrated ability to detect, evaluate, and remediate security threats, weaknesses, and breach-related risks.

• Familiarity with information security governance, policy, and regulatory expectations; experience within a nonprofit environment is a plus.

• Excellent written and verbal communication skills, with the professionalism and discretion needed to manage confidential security matters.