Sr. Cybersecurity Engineer - HYBRID

Rapiscan Systems, Inc.; Hawthorne (CA); On-site; USD 160,000 - 170,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Disability insurance

Life insurance

Paid time off

Job summary

OSI Systems is seeking a Sr. Cybersecurity Engineer to lead security controls across multi-cloud environments and drive risk reduction initiatives. The role partners with IT Infrastructure, Applications, and Compliance to design and enforce security solutions.

The ideal candidate has 7+ years in information security, strong cloud security experience in AWS/Azure, and hands-on expertise with NIST 800-171 and ISO 27002. Strong communication and global collaboration are essential.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 7+ years in information security with 5+ years in cyber security in a hybrid cloud environment (on-prem, AWS, Azure).
• 3+ years conducting risk assessments of SaaS services.
• Hands-on experience in network security, systems security (Windows/Linux), cloud security (AWS/Azure) and IAM.
• Experience with M365 E5 Security Suite, AWS/Azure Threat Detection and Response.
• Experience implementing NIST 800-171 and ISO 27002 controls.
• Familiarity with AI/web technologies and protocol understanding.
• Strong communication in English and ability to lead security projects.

Responsibilities

• Engineering, implementation, and monitoring of security controls across multi-cloud environments.
• Risk assessment of M365, AWS, Azure and third-party SaaS; recommend mitigations.
• Design enterprise-scale Cyber Security Solutions aligned with Information Security Strategy.
• Identify security requirements for Business and IT Projects; report risks and improvements.
• Lead triage of security incidents and guide security operations.
• Service management for security platforms: problem, change, configuration, asset mgmt.
• Collaborate with third‑party security providers to meet delivery objectives.
• Publish standards, processes, and operating procedures.

Skills

Cyber security

Risk assessment

Cloud security

IAM & PAM

Incident response

M365 E5

AWS / Azure

NIST 800-171

ISO 27002

Vulnerability mgmt

Education

Bachelor's degree in Computer Science/Info Security

Tools

Firewalls

VPN

WAF

CASB

Cloud security tools

Job description

Overview

OSI Systems and its subsidiaries is a vertically integrated provider of specialized electronic systems and for components that meet the critical needs in the homeland security, healthcare, defense, and aerospace industries. As a global company, we are dedicated to developing solutions for our customers and the people they serve to lead the way to a safer and healthier world.

OSI Systems is seeking a Sr. Cybersecurity Engineer. This individual will be involved with cyber security projects along with day-to-day security operations tasks to achieve Information Security long term goals. This role reports directly to the Information Security and Risk Management Vice President.

Responsibilities

• Engineering, implementation, and monitoring of security controls for the protection of network, systems, data and endpoints in an multi-cloud environment, to help mitigate security risks. Work with the IT Infrastructure, IT Applications, IT Compliance and Governance teams to implement these controls.
• Risk assessment of M365 platform, AWS, Azure and third-party SaaS services, make recommendations to mitigate risk.
• Designing enterprise scale Cyber Security Solutions in alignment with Information Security Strategy.
• Identify and define security requirements for Business and IT Projects. Analyze, report, and assist in management of security-related risks, including reporting on outcomes and proposing further security improvements.
• Key member in responding to and triaging security incidents, including guiding security operations and security engineers.
• Perform service management for security platforms, including problem, change, configuration, and asset management.
• Work with third-party security service providers to ensure service delivery objectives are met.
• Prepare and publish standards, processes and operating procedures.
• Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork.
• Demonstrate behavior consistent with the company’s Code of Ethics and Conduct.
• It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem.
• Duties may be modified or assigned at any time to meet the needs of the business.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field required.
• Must have minimum seven (7) years of work experience in information security with at least five (5) years of work experience in cyber security, in a hybrid cloud computing environment (on-premises, AWS and Azure).
• Must have at least three (3) years of work experience in conducting Risk Assessments of SaaS services.
• Hands‑on experience in network security (Firewalls, VPN, Proxys, Web Application Firewall, CASB, etc.), systems security Windows and Linux), cloud security (AWS and Azure), endpoint security and identity and access management is required.
• Hands‑on experience in vulnerability management, configuration management, media protection, contingency planning, log management, and data protection methods is desired.
• Experience in M365 E5 Security Suite, AWS and Azure Threat Detection and Response techniques required.
• Must have hands‑on experience in implementing NIST 800-171 and ISO 27002 security control frameworks.
• Familiarity with AI and web related technologies (GenAI, Agentic AI, Web applications, API, etc.) and of network/web related protocols needed.
• Must have thorough understanding of the security principles, techniques, and protocols, including defense-in-depth, network segmentation, privileged access management, common application security flaws, and commonly known ports.
• Professional information security-related certifications such as CISSP, GSEC, CCSP is required.
• Familiarity with standards and frameworks such as NIST 800-53, PCI-DSS, HIPAA Security and Privacy Rule, ISO/NIST Risk Management desired.
• Proven ability to lead a project from start to finish from the technical side.
• Previous experience working in a global enterprise environment desired.
• Good verbal and written communication skills in English are essential.
• Must have capability to clearly communicate information security concepts and risks.
• Problem solving skills and ability to work under pressure needed.
• Must be able to work independently as well as in a team structure.
• Willingness to accommodate other time‑zones required.
• Off‑hours support may be needed.

Pay may range from $160,000 to $170,000 annually

The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job‑related knowledge and skills, and education in conjunction with market and business considerations.

Base salary is one component of your total rewards package. You may be eligible for long‑term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full‑Time salaried employees are entitled to flexible time‑off.

NOTICE TO THIRD PARTY AGENCIES

OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.

Equal Opportunity Employer - Disability and Veterans

Know Your Rights

https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf

Poster Link:

https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf

OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.