Cybersecurity Engineer (1145497)

The Judge Group; Westborough (MA); On-site; USD 75,000 - 135,000; Full time

Job summary

The Judge Group is seeking a Cybersecurity Engineer to design, secure, monitor, and improve enterprise security operations and infrastructure. This on-site role combines security engineering, operations, IAM, threat detection, and incident response in a lean, high-visibility team.

You will own critical security platforms, balance strategic initiatives with day-to-day tasks, and help strengthen the organization’s overall security posture from Westborough, MA.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or equivalent experience.
• 5+ years in cybersecurity, security engineering, or security operations.
• Experience securing Windows and/or Linux environments.
• Experience with SIEM and security event analysis.
• Knowledge of vulnerability management, endpoint security, firewalls, and security monitoring.
• Experience managing IAM platforms.
• Strong cybersecurity framework knowledge and best practices.
• Excellent incident investigation, documentation, and analytics.

Responsibilities

• Own and manage Okta administration and SSO environments.
• Design, implement, and maintain identity lifecycle management processes.
• Manage MFA, conditional access policies, RBAC, and authentication security.
• Ensure secure access governance across systems and applications.
• Lead IAM-related security improvements and compliance initiatives.
• Monitor, investigate, and respond to security alerts and incidents.
• Analyze endpoint, network, application, and identity-related security events.
• Threat hunting and proactive threat identification.
• Coordinate incident response and remediation actions.
• Administer and improve security technologies including Google SecOps, ThreatLocker, Microsoft Defender, Firewalls, IDS/IPS, and vulnerability platforms.
• Harden and secure Windows and/or Linux systems; perform security reviews.

Skills

Okta admin

SSO

IAM

MFA

RBAC

Zero Trust

SIEM

ThreatLocker

Google SecOps

Windows

Linux

Firewalls

Vulnerability Mgmt

Incident response

Threat hunting

Endpoint security

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Google SecOps

ThreatLocker

Microsoft Defender

IDS/IPS

Job description

Location: Westborough, MA

Salary: $75,000.00 USD Annually - $135,000.00 USD Annually

About the Role

We're looking for a Cybersecurity Engineer to help design, secure, monitor, and improve enterprise security operations and infrastructure. This is a hands-on role that combines security engineering, security operations, identity and access management, threat detection, and incident response.

You’ll be part of a lean, highly visible cybersecurity team where you’ll own critical security platforms and help strengthen the organization’s overall security posture. This position requires a professional who can balance strategic security initiatives with day-to-day operational security responsibilities.

Location: Westborough, MA(Fully On-site)

What You’ll Do

Identity & Access Management (Critical Ownership Area)

• Own and manage Okta administration and enterprise Single Sign-On (SSO) environments.
• Design, implement, and maintain identity lifecycle management processes.
• Manage MFA, conditional access policies, role-based access controls, and authentication security.
• Ensure secure access governance and identity protection across systems and applications.
• Lead IAM-related security improvements and compliance initiatives.

Security Operations & Incident Response

• Monitor, investigate, and respond to security alerts and incidents.
• Analyze endpoint, network, application, and identity-related security events.
• Conduct threat hunting activities and proactively identify potential threats.
• Investigate suspicious activity and document findings, root causes, and remediation actions.
• Coordinate response efforts for security incidents and vulnerabilities.

Security Engineering & Platform Administration

• Administer and improve security technologies including:
  • Google Security Operations (Google SecOps/SIEM)
  • ThreatLocker
  • Microsoft Defender
  • Firewalls
  • IDS/IPS solutions
  • Vulnerability Management platforms
  • Secure Remote Access technologies
• Manage application whitelisting and Zero Trust security controls.
• Harden, secure, and maintain Windows and/or Linux systems.
• Perform ongoing security configuration reviews and control validation.

Vulnerability & Risk Management

• Conduct vulnerability assessments and security reviews.
• Prioritize and remediate security risks across servers, endpoints, and applications.
• Identify gaps in security controls and implement improvements.
• Support disaster recovery, business continuity, and change management initiatives.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
• 5+ years of cybersecurity, security engineering, or security operations experience.
• Experience administering and securing Windows and/or Linux environments.
• Experience with SIEM technologies and security event analysis.
• Knowledge of vulnerability management, endpoint security, firewalls, and security monitoring.
• Experience managing Identity and Access Management (IAM) platforms.
• Strong understanding of cybersecurity frameworks and security best practices.
• Excellent incident investigation, documentation, and analytical skills.

Preferred Qualifications

• Hands-on Okta administration and Single Sign-On (SSO) ownership experience.
• Experience with Google SecOps.
• Experience with ThreatLocker