Senior Cybersecurity Audit Engineer & Risk Advisor

The Timberline Group; St. Louis (MO); On-site; USD 110,000 - 160,000; Full time

Job summary

The Timberline Group is seeking a Cyber Security Audit Engineer to lead holistic audits across applications, databases, servers, networks and security tooling. You will assess IT process and technology risks, design and execute audit tests, document findings, and prepare client-ready reports.

The role requires hands-on experience with Qualys/Nessus, familiarity with COBIT/ISO/NIST frameworks, and the ability to translate technical results into actionable risk recommendations for complex

Qualifications

• Minimum of 5 years in enterprise network security (design, implementation, management).
• 5+ years designing and managing cybersecurity solutions across domains (defense, vulnerability, analytics, identity, SOC).
• Experience with IT control assessments and risk-based testing.
• Strong written and verbal communication; able to convey findings to clients.

Responsibilities

• Design, build, implement and monitor a holistic audit program across the enterprise.
• Develop understanding of IT risks, controls, processes and systems under review.
• Perform process and technology risk analysis with a cybersecurity mindset and prepare audit deliverables.
• Assess IT processes and security controls within information systems environments.
• Evaluate test results and provide root-cause analysis and recommendations.
• Audit technology such as applications, databases, servers, networking devices, and security tools (IDS/IPS, anti-malware, AD).
• Align reviews with industry frameworks like COBIT 5, ISO 27001/27005, NIST SP 800-30.

Skills

Security auditing

Vulnerability scanning

Incident response

Cybersecurity frameworks

Technical writing

Communication skills

Education

CISSP

CCNP Security

Security+

Tools

Qualys

Nessus

Active Directory

Firewalls/IDS-IPS

Job description

The Timberline Group is seeking a Cyber Security Audit Engineer to lead holistic audits across applications, databases, servers, networks and security tooling. You will assess IT process and technology risks, design and execute audit tests, document findings, and prepare client-ready reports.

The role requires hands-on experience with Qualys/Nessus, familiarity with COBIT/ISO/NIST frameworks, and the ability to translate technical results into actionable risk recommendations for complex