Cybersecurity Engineer I/II (Remote - US)

BNSF; Northern (KY); Hybrid; USD 94,000 - 175,000; Full time

Benefits offered by this job

401(k) plan

Healthcare options

Life insurance

Parental benefits

Travel discounts

Annual bonus

Job summary

BNSF Railway seeks a Cybersecurity Engineer I/II to join its remote US security team. You will design and implement security controls across networks, cloud, and applications, helping safeguard critical assets and data.

The role offers a base salary range of $93,750 to $175,000 with bonus eligibility, travel up to 20%, and sponsorship options for eligible candidates. You will collaborate with DevOps, SOC, and IR teams, and contribute to playbooks and incident response.

Qualifications

• Authorized to work in the US
• Minimum 2 years of cybersecurity engineering or related experience

Responsibilities

• Design, implement, and maintain security controls across network, infrastructure, data, and applications
• Assist in creation of security policies and standards
• Perform risk assessments and data protection strategies
• Assist in penetration testing and vulnerability assessments
• Develop tooling to aid in automation for threat detection, response, and reporting
• Collaborate with DevOps/IT to embed security into CI/CD and cloud environments
• Monitor and respond to security incidents with SOC/IR teams
• Support compliance initiatives (NIST, SOX)
• Participate in red/blue team exercises and threat modeling
• Evaluate emerging threats and recommend proactive security measures
• Contribute to runbooks and playbooks for security operations

Skills

Python

Java

Automation scripting

Network security

Zero Trust

SOC operations

Communication

Documentation

Education

Bachelor's degree or higher in computer science/cybersecurity

Tools

Burp Suite

Metasploit

Nmap

Job description

Cybersecurity Engineer I/II (Remote - US)

be part of a team that values safety, inclusion, and excellence we are one of the largest U.S. railroads transporting the nation’s freight across 28 western states and 3 Canadian provinces. as a member of our team, you will play a role in supporting the movement of essential products and materials that help feed, clothe, supply, and power communities throughout America and the world.
bnsf | tech: innovating and transforming the future of freight rail
bnsf | tech is the technology division making BNSF the preeminent freight and mobility company in north america.
are you ready to drive change? if you are passionate about making a difference and eager to advance your career in a dynamic and supportive environment, we want you on our team! join us in reshaping the future of freight rail and discover a fulfilling career where your contributions matter.
we are committed to a culture where all employees are included, belong, and have equal opportunity to achieve their full potential.Come make a difference with us!
learn more about BNSF and our Benefits
Job Location: Remote US
Anticipated Start Date: 09/01/2026

The US base salary range for this full-time position is provided below:

Salary Range: $93,750 - $175,000

L3: $93,750 - $125,000

L4: $123,750 - $175,000

The range represents the amount bnsf | tech reasonably expects to pay for the position based on the level, scope, and responsibilities of the role.
In addition to base pay and bonus eligibility, BNSF offers a comprehensive benefits package.
This is a full-time remote position. Employees may work from anywhere within the contiguous 48 states of the United States

Travel is up to 20%. Employees will be required to occasionally travel to our corporate headquarters in Fort Worth, TX for in person meetings. Travel expenses for business needs will be covered by BNSF

This position is open to candidates who are currently authorized to work in the United States. We are also open to sponsoring H-1B transfers, TN nonimmigrant status, and STEM OPT candidates with at least 2 years of remaining eligibility.

cybersecurity:protect the company, our customers and employees against cyber threats and innovate engineering solutions for a more resilient rail network.

We are seeking a highly skilled and proactive Cybersecurity Engineer to join our growing security team. This role is ideal for professionals who thrive in dynamic environments and are interested in helping secure our nation’s critical infrastructure. The ideal candidate will play a critical role in safeguarding our digital assets, infrastructure, and applications while contributing to the maturity of our security operations.

Key responsibilities may include:

• Design, implement, and maintain security controls across network, infrastructure, data, and application layers
• Assist in the creation of security policies and standards for adherence.
• Perform risk assessments and contribute to data protection strategies across structured and unstructured data
• Assist in penetration testing and vulnerability assessments to identify and remediate risks
• Develop and maintain tooling to aid in automation for threat detection, response, and reporting
• Collaborate with DevOps and IT teams to embed security into CI/CD pipelines and cloud environments
• Monitor and respond to security incidents, working closely with SOC and IR teams
• Support compliance initiatives (e.g., NIST, SOX) through technical enforcement and documentation
• Participate in red/blue team exercises and threat modeling activities
• Continuously evaluate emerging threats and recommend proactive security measures
• Contribute to the development of playbooks, runbooks, and operational procedures for security operations

The duties and responsibilities in this posting are representative categories to be used in deciding whether to apply for this position. This is not an exhaustive list of the position’s duties.

At BNSF Railway, we encourage individuals from all backgrounds to apply, showcasing their skills, experiences and development. We provide resources and tools to help you reach your full potential, fostering a supportive and inclusive environment.

Basic Qualifications

• Authorized to work in the US
• Minimum 2 years of experience in cybersecurity engineering or related roles

Preferred Qualifications

• Bachelor’s degree or higher in computer science, cybersecurity, or related field.
• Able to work now and in the future without BNSF’s assistance (whether monetary, through sponsorship, or otherwise) in obtaining, maintaining, or extending employment authorization (including H-1B, STEM OPT/CPT, or TN nonimmigrant status).
• Proficiency in Python or Java for automation, scripting, and tool development
• Hands-on experience with penetration testing tools (e.g., Burp Suite, Metasploit, Nmap)
• Strong understanding of network security protocols, firewalls, IDS/IPS, and VPNs and an understanding of Zero Trust Networking principles
• Knowledge of data security principles including encryption, DLP, and access controls
• Experience securing web and mobile applications, APIs, and microservices
• Experience security containerized and epoxy application deployments
• Familiarity with infrastructure security across on-prem, cloud (AWS/Azure/GCP), and hybrid environments
• Solid grasp of Security Operations Center (SOC) workflows, SIEM platforms, and incident response
• Certifications such as OSCP, CEH, CISSP, or GIAC are a plus
• Strong analytical and problem-solving skills
• Excellent communication and documentation abilities
• Ability to work independently and collaboratively in cross-functional teams
• Passion for continuous learning and staying ahead of the threat landscape
• Experience with secure access frameworks (SASE, ZTNA).
• Contributions to open-source security tools or research.

At BNSF, you will have access to a comprehensive and competitive benefits package including:

• An industry-leading 401(k) and renowned Railroad Retirement program.
• A range of robust health care options for you and your dependents (including domestic partners), including medical, dental, vision, telemedicine, mental health, cancer support, and high-quality care network options.
• Health care spending accounts (HSA) with employer contributions, as well as life and disability insurance, provided at no cost.
• Family benefits includingparental, pediatric and family building support, adoption and surrogacy reimbursement, and dependent care spending account (with employer match).
• Access to discounts on travel, gym memberships, counseling services and wellness support.
• Annual bonus (Incentive Compensation Program)

All positions require pre-employment background verification, medical review and pre-employment drug screen. You can find more information by reviewing theHiring Process . Federal authority requires BNSF employees, whose work requires unescorted access to secure areas of port facilities, to obtain a TWIC. More information is available athttps://www.tsa.gov/for-industry/twic

BNSF Railway is an Equal Opportunity Employer, all qualified applicants receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Nearest Major Market: Fort Worth
Nearest Secondary Market: Dallas
Job Segment: Network Security, Cyber Security, Open Source, Computer Science, Developer, Security, Technology