Cybersecurity Engineer

Accela; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Accela is seeking a Cybersecurity Engineer to independently execute security engineering across endpoints, cloud, and enterprise systems. You will troubleshoot, implement safeguards, and collaborate with IT, DevOps, IAM, and Compliance to strengthen security posture.

The role emphasizes owning defined workstreams, contributing to SOC 2/HIPAA/NIST practices, and developing automation with PowerShell, Bash, or Python. Strong analytical skills and runbook creation are essential.

Qualifications

• 3+ years of enterprise IT or security operations experience.
• Hands-on with Windows, macOS, Linux endpoints and EDR/AV agents.
• Experience with identity and access management (AD, SSO, MFA, conditional access).
• Experience with reviewing logs, alerts, and vulnerability management.
• Familiarity with SaaS platforms (Microsoft 365, Google Workspace, Salesforce).
• Scripting for troubleshooting and automation (PowerShell, Bash, Python).
• Ability to work independently and escalate when needed.
• Strong documentation and runbook creationSkills.

Responsibilities

• Manage endpoint security and compliance across Windows, macOS, Linux.
• Administer access controls: provisioning/deprovisioning, SSO, MFA, conditional access.
• Monitor SIEM/EDR logs, triage alerts, escalate complex findings.
• Investigate incidents, document findings, and suggest next steps.
• Oversee vulnerability-management activities and coordinate remediation.
• Conduct access reviews and ensure least-privilege practices.
• Own workstreams in security tech implementations and rollouts.
• Maintain controls for SOC 2, HIPAA, ISO 27001, NIST CSF.
• Develop scripts to reduce manual work and improve efficiency.
• Collaborate with IT/Engineering/DevOps/IAM teams before deployments.
• Identify recurring issues and drive process improvements.
• Create and maintain runbooks and technical documentation.
• Track trends to improve security practices.

Skills

Endpoint security

Threat analysis

Automation

SLA/incident response

Log analysis

Cloud platforms

Documentation

Collaboration

Risk assessment

Tools

PowerShell

Bash

Python

Job description

About The Role

The Cybersecurity Engineer is responsible for independently executing defined security engineering and operational work across Accela’s endpoints, identities, cloud platforms, and enterprise systems. This role applies established security standards and practices to troubleshoot issues, maintain technical controls, analyze findings, implement solutions, and identify opportunities to improve how the team operates.

About The Role

The Cybersecurity Engineer is responsible for independently executing defined security engineering and operational work across Accela’s endpoints, identities, cloud platforms, and enterprise systems. This role applies established security standards and practices to troubleshoot issues, maintain technical controls, analyze findings, implement solutions, and identify opportunities to improve how the team operates.

The Cybersecurity Engineer partners with IT, Engineering, DevOps, IAM, Compliance, and other teams to maintain effective technical safeguards while supporting business continuity. The role is expected to independently manage routine and moderately complex work, make sound decisions within established practices, and escalat highly complex or unfamiliar matters to senior engineers or security leadership as appropriate.

The ideal candidate brings strong enterprise IT experience, hands-on exposure to security technologies, and the ability to take ownership of assigned work from identification through resolution. This individual is also expected to identify recurring issues, recommend process or automation improvements, and continue building technical depth across security tooling, cloud platforms, and enterprise systems.

Specific Responsibilities

• Independently manage endpoint security and compliance activities across Windows, macOS, and Linux environments, including security baselines, EDR and antivirus agents, disk encryption, MDM, and operating system hardening.
• Administer and troubleshoot identity and access controls, including account provisioning and deprovisioning, SSO, MFA, conditional access, and authentication issues.
• Monitor and analyze alerts and logs within SIEM, EDR, and related platforms, perform initial triage, take appropriate action within established procedures, and escalat complex findings when necessary.
• Conduct initial technical investigations by gathering and analyzing evidence, documenting findings, and recommending appropriate next steps.
• Manage assigned vulnerability-management activities, including reviewing scan results, evaluating severity and exploitability, coordinating remediation with system owners, and tracking work through completion.
• Perform periodic access reviews, recertification activities, privileged-access reviews, and third-party access validation to support least-privilege practices.
• Own defined workstreams within security technology implementations, including planning, testing, configuration, pilot deployments, documentation, and rollout support.
• Maintain assigned technical controls and support evidence collection and control activities associated with SOC 2, HIPAA, ISO 27001, NIST CSF, and other applicable frameworks.
• Develop and maintain scripts or automation using tools such as PowerShell, Bash, or Python to reduce manual effort and improve operational consistency.
• Independently troubleshoot routine and moderately complex technical issues and coordinate with appropriate teams to drive issues through resolution.
• Partner with IT, Engineering, DevOps, IAM, and Platform teams to validate technical findings, test configuration changes, and provide security guidance before broader deployment.
• Identify recurring operational issues and recommend improvements to processes, tooling, configurations, automation, or documentation.
• Create and maintain technical documentation, runbooks, workflows, and knowledge resources that enable consistent execution and effective knowledge sharing.
• Use operational data and technical findings to identify trends and recommend improvements to security practices and processes.
• Contribute to continuous improvement of team workflows by identifying opportunities to simplify work, improve consistency, and reduce repetitive manual activities.
• Maintain current knowledge of evolving security technologies, cloud platforms, industry practices, and emerging technical threats.

Required Qualifications

• 3+ years of experience in enterprise IT, endpoint operations, identity and access management, security operations, systems administration, or a related technical field.
• Hands-on experience maintaining and troubleshooting endpoint technologies across Windows, macOS, and Linux, including EDR or antivirus agents, MDM, disk encryption, and operating system configurations.
• Working knowledge of identity and access management technologies and practices, including Active Directory, SSO, MFA, conditional access, and account lifecycle management.
• Experience reviewing technical logs, troubleshooting alerts, conducting initial investigations, or supporting vulnerability-management activities.
• Experience working with enterprise platforms such as Microsoft 365, Google Workspace, Salesforce, or similar SaaS environments and understanding their identity and access models.
• Experience using PowerShell, Bash, Python, or similar scripting and command-line tools for troubleshooting or automating routine tasks.
• Demonstrated ability to independently manage assigned technical work, determine appropriate next steps, and escalation when issues exceed established scope or expertise.
• Ability to identify recurring issues and recommend practical improvements to tools, workflows, documentation, or technical processes.
• Strong analytical and problem-solving skills with the ability to evaluate technical information and make sound decisions.
• Strong documentation skills, including experience creating and maintaining runbooks, workflows, technical procedures, or knowledge resources.
• Ability to balance technical requirements