Cybersecurity Engineer: Cloud Security & Incident Response

Nordis Technologies; Town of Florida (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Nordis Technologies is seeking a Cybersecurity Engineer to design, implement, and continuously improve security controls across a hybrid environment including private cloud and Azure. You will lead risk management, incident response, vulnerability management, and regulatory compliance with frameworks like SOC 2, PCI DSS, HIPAA, and NIST.

The role involves security architecture, operations, and collaboration with stakeholders to maintain a secure, compliant, and resilient operating environment

Qualifications

• Minimum five (5) years of progressive experience in cybersecurity, security engineering, or security operations.
• Current CISSP certification.
• Experience administering enterprise security technologies (EDR, SIEM, vulnerability management, identity security).
• Knowledge of Microsoft security technologies, cloud security principles, and enterprise infrastructure security.
• Experience with frameworks such as SOC 2, PCI DSS, HIPAA, NIST CSF, ISO 27001.

Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity threats, alerts, and incidents across cloud, endpoint, network, email, and applications.
• Lead incident response activities including containment, remediation, and post-incident analysis.
• Maintain and optimize security monitoring, detection, and response capabilities to improve threat visibility.
• Develop and maintain security documentation, standards, procedures, and control evidence.

Skills

Security engineering

Incident response

Risk management

Vulnerability assessment

Security analytics

Education

Bachelor's degree in Information Security

Tools

EDR

SIEM

MDR

PowerShell

Python

Job description

Nordis Technologies is seeking a Cybersecurity Engineer to design, implement, and continuously improve security controls across a hybrid environment including private cloud and Azure. You will lead risk management, incident response, vulnerability management, and regulatory compliance with frameworks like SOC 2, PCI DSS, HIPAA, and NIST.

The role involves security architecture, operations, and collaboration with stakeholders to maintain a secure, compliant, and resilient operating environment