Cyber Security Specialist

North Star Mohican Casino Resort; Bowler (WI); On-site; USD 80,000 - 120,000; Full time

Job summary

Stockbridge Munsee Community seeks a Cyber Security Specialist to protect information systems, data, and digital services across on-premises and cloud environments. You will focus on identity security, vulnerability management, incident response, and continuous security improvement, aligned with NIST and tribal governance.

The role requires an associates or bachelor’s degree in IT/cybersecurity, strong analytical skills, and ability to work with internal teams and external partners.

Qualifications

• Associates or better in Information Technology or related field.
• Working knowledge of cybersecurity threats, attack vectors, and defensive controls.
• Experience supporting Windows Environment, Active Directory, and Microsoft 365.
• Strong analytical, documentation, and communication skills.
• Strong organizational skills and attention to detail.
• Ability to work both independently and collaboratively under deadlines.
• Strong sense of confidentiality, integrity, and public trust
• Ability to translate cyber risk into business and operational impact
• Collaboration across IT, leadership, and external partners
• Continuous improvement and security-first mindset
• Full-time role with on-call availability for critical incidents

Responsibilities

• Monitor, investigate, and respond to cybersecurity alerts from SIEM, endpoint, email, and cloud security tools.
• Lead incident response activities, including containment, remediation, documentation, and lessons learned.
• Coordinate with internal IT teams and external partners during security incidents.
• Support 24/7 readiness through on-call escalation when required.
• Support implementation and enforcement of MFA and password-less authentication.
• Monitor authentication activity for anomalous or suspicious behavior.
• Support least-privilege and RBAC across SMC systems.
• Assist with identity governance.
• Perform vulnerability scanning and risk assessments across endpoints, servers, networks, and cloud services.
• Prioritize findings based on risk to operations, data sensitivity, and regulatory impact.
• Track remediation efforts and report status to IT leadership.
• Support audit responses and risk assessments.
• Assist with deployment, configuration, and tuning of email/phishing protection, network and firewall controls.
• Maintain logging and evidence required for audits and compliance reviews.
• Support policies aligned with NIST Cybersecurity Framework and tribal/regulatory requirements.
• Assist with cybersecurity awareness training and phishing resistance programs; contribute to IR/DR/BC documentation

Skills

SIEM & log analysis

Endpoint security platforms

Vulnerability management tools

Microsoft 365 / Azure security

PowerShell / Python scripting

Zero Trust security principles

Public sector / tribal government /Reg

Security certifications (Security+ /CE

Threat awareness & risk analysis

Analytical & communications skills

Education

Associates degree in Information Technology or related field

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field

Job description

Every employee of Stockbridge Munsee Community is expected to present themselves in a professional manner to customers as well as other departments. Stockbridge Munsee Community strives to provide a positive team environment where everyone contributes.

GENERAL RESPONSIBILITIES:

The Cyber Security Specialist is responsible for protecting the Stockbridge‑Munsee Community’s information systems, data, and digital services. This role focuses on identity security, vulnerability management, incident response, and continuous security improvement across on-premises and cloud environments. The Specialist supports SMC’s mission by safeguarding sensitive tribal, governmental, health, and financial data while aligning cybersecurity practices with NIST and public‑sector best practices

STANDARD QUALIFICATIONS:

All employees of Stockbridge Munsee Community must meet the following qualification:

1.Must submit to and pass a pre-employment drug and health screening.

2.Must be at least 18 years of age, unless otherwise stated on job description

3.Must maintain an acceptable departmental attendance record

4.Must be able to work weekends, nights and holidays

DUTIES:

1. Monitor, investigate, and respond to cybersecurity alerts from SIEM, endpoint, email, and cloud security tools.

2. Lead incident response activities, including containment, remediation, documentation, and lessons learned.

3. Coordinate with internal IT teams and trusted external partners during security incidents.

4. Support 24/7 readiness through on‑call escalation when required.

5. Support implementation and enforcement of Multi‑Factor Authentication (MFA) and password less authentication.

6. Monitor authentication activity for anomalous or suspicious behavior.

7. Support least‑privilege and role‑based access controls across SMC systems.

8. Assist with identity governance.

9. Perform vulnerability scanning and risk assessments across endpoints, servers, networks, and cloud services.

10. Prioritize findings based on risk to SMC operations, data sensitivity, and regulatory impact.

11. Track remediation efforts and report status to IT leadership.

12. Support audit responses and risk assessments.

13. Assist with deployment, configuration, and tuning of:

• Email and phishing protection
• Network and firewall security controls

14. Maintain logging and evidence required for audits and compliance reviews.

15. Support cybersecurity policies and standards aligned with:

• NIST Cybersecurity Framework
• Tribal governance requirements
• Applicable public‑sector and health/financial data regulations

16. Assist with cybersecurity awareness training and phishing resistance programs. Contribute to incident response, disaster recovery, and business continuity documentation

QUALIFICATIONS:

1. Associates degree, Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience in cyber security role.

2. Working knowledge of cybersecurity threats, attack vectors, and defensive controls.

3. Experience supporting Windows Environment, Active Directory, and Microsoft 365.

4. Strong analytical, documentation, and communication skills.

5. Strong organizational skills and attention to detail.

6. Ability to work both independently and collaboratively under deadlines.

7. Strong sense of confidentiality, integrity, and public trust

8. Ability to translate cyber risk into business and operational impact

9. Collaboration across IT, leadership, and external partners

10. Continuous improvement and security‑first mindset

11. This is a full‑time position requiring occasional on‑call availability for critical incidents.

12. Required Experience

• Experience with:
• SIEM and log analysis
• Endpoint security platforms
• Vulnerability management tools
• Microsoft 365 / Azure security controls
• Scripting or automation experience (PowerShell and/or Python).
• Experience with Zero Trust security principles.
• Experience in public sector, tribal government, healthcare, or regulated environments.
• Certifications (one of required); CompTIA Security+, CEH, CISA, or CISSP (or demonstrated progress toward certification)

13. Must pass pre-employment drug and health screening.Must adhere to the Tribe’s Drug and Alcohol Free Workplace Policy during the course of employment.

14. Must be eligible for coverage under the employer’s liability insurance.

15. Must have demonstrated ability to maintain satisfactory working record in any prior or current employment.

16. Must be able to meet physical requirements of position.

17. Must have a valid driver’s license, reliable transportation, and insurance are required.Must obtain a Wisconsin driver’s license within 30 days of employment if applicant has an out-of-state driver’s license.Must meet and maintain the eligibility to operate a personal or tribal vehicle under the driver acceptability guidelines as established by Mohican Nation Insurance.

18. Must abide by departmental and organizational safety, testing, and uniform guidelines.

PHYSICAL REQUIREMENTS/WORK ENVIRONMENT

1. This position requires a lot of sitting with occasionally stoop, kneel, crouch, and lift and/or move up to twenty-five (25) pounds.

2. Evening and/or weekend is required. Extended hours and irregular shifts may be required.

3. Work environment requires excellent personal hygiene due to working in close proximity to others and in an enclosed area.

4. A Tuberculosis (TB) Screening and/or TB Skin Test may be required.

The Stockbridge-Munsee Community operates as an equal opportunity employer except Indian Preference is given in accordance with the Employee Preference Policy Ordinance as permitted under federal law. Due to broad federal funding and the co-mingling of fiscal resources, all tribal government operations jobs are treated as federally-funded for the purposes of the Employee Preference Policy Ordinance unless specifically identified as not federally-funded.

Although an interview may be granted, this does not determine that the candidate fully meets the qualifications until it is determined by the interview team.

Qualifications

Education

Required

Associates or better in Information Technology or related field.

Bachelors or better in Information Technology or related field.

Experience

Required

• SIEM and log analysis
• Endpoint security platforms
• Vulnerability management tools
• Microsoft 365 / Azure security controls
• Scripting or automation experience (PowerShell and/or Python)
• Experience with Zero Trust security principles
• Experience in public sector, tribal government, healthcare, or regulated environments
• Certifications (one of required); CompTIA Security+, CEH, CISA, or CISSP (or demonstrated progress toward certification)

Licenses & Certifications

Required

Driver's License

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.