Cybersecurity Specialist

6 дн. назад

USA

incident responseidentity and access managementsecurity compliancevulnerability managementdata governance

Responsible for supporting day-to-day security operations, monitoring alerts, managing vulnerabilities, and ensuring security compliance in a fast-moving startup environment.

Обязанности

Run day-to-day security monitoring. Monitor endpoint detection and response (EDR) tooling and security alerts, triaging, investigating, resolving, and escalating findings as appropriate.
Drive vulnerability management. Support the full lifecycle from scanning and prioritization through remediation tracking, verification, and reporting, partnering with teams across to get issues resolved.
Execute incident response. Carry out detection, containment, eradication, and recovery procedures in coordination with the Director, IT & Infrastructure, escalating higher-severity or ambiguous incidents as needed.
Keep systems hardened. Maintain configuration baselines, hardened builds, authorized software and service tracking, and drift monitoring against approved standards — and help drive findings through remediation and verification.
Support identity and access. Help administer our identity and access management environment, support joiner/mover/leaver workflows and automated provisioning, and assist with privileged access and routine access reviews.
Support data governance and resilience. Help apply data classification, data loss prevention (DLP), and retention controls; coordinate with Facilities where physical security systems intersect with company systems; and support backup, disaster recovery, and business continuity testing.
Improve security as we scale. Look for opportunities to strengthen processes, automate repetitive work, improve documentation, and make our day-to-day security operations more effective as grows.
Keep documentation audit-ready. Maintain accurate records of security procedures, incidents, configuration baselines, and exceptions, and contribute to runbooks, SOPs, and GRC evidence.
Help the whole company stay secure. Support our security awareness and training program, including phishing simulations, and help reinforce good security practices across .

Условия

Competitive compensation , including a robust equity incentive plan.
Comprehensive health, dental, and vision insurance — we cover 100% of your premiums .
401(k) with company matching, so you can plan for the future.
Generous flexible time off , paid parental leave, and company-wide holiday breaks.
Relocation packages available for those moving to join our team.
Daily free catered lunches .
Learning and professional development opportunities .
If you’re ready to take on an exciting challenge, grow with us, and make a lasting impact, we want to hear from you. Even if you don’t meet every requirement, but you see yourself contributing to our mission, we encourage you to apply! We value diverse skillsets and experiences and believe in the potential of passionate individuals to make a big impact.

Другое

At , we’re on a mission to revolutionize regional transportation between coastal cities. We're not just building vehicles, we're creating a new category of transportation: the Seaglider. These groundbreaking wing-in-ground-effect craft travel just above the water’s surface, combining the speed of an airplane with the low operating costs of a boat. Capable of 180 miles at 180 mph on today's battery tech (and up to 400 miles with next-gen batteries), Seagliders will unlock fast, affordable, and sustainable coastal transit for passengers and cargo - connecting cities, islands, and communities like never before.
Backed by leading investors and powered by a team of passionate, forward-thinking engineers, builders, and operators, we’re now scaling from a breakthrough prototype to full production - and building the team to make it happen.
Building a new category of vehicle means building a company people can trust with sensitive technology, systems, and data. As 's Cybersecurity Specialist , you'll help protect that foundation by supporting the day-to-day security operations that keep our environment secure as we scale.
This is a hands-on role in an evolving, fast-moving startup environment. You'll monitor and investigate security alerts, manage vulnerabilities through remediation, help keep systems aligned to our security standards, and support incident response, identity and access, data governance, and security compliance. You'll work closely with the Director, IT & Infrastructure, taking ownership of day-to-day security work while partnering and escalating when issues require broader context or judgment.
At , our systems and processes are evolving alongside the company. We're looking for someone who is comfortable learning as they go, adapting to changing priorities, and looking for ways to make the way we work better - whether that's improving a process, strengthening documentation, automating a repetitive task, or catching a security gap before it becomes a bigger problem.
As we scale toward CMMC Level 2 certification and manufacturing , your work will directly strengthen our security posture and compliance readiness. If you're curious, detail-oriented, and excited to grow your security expertise while helping protect the technology bringing Seagliders to market, we'd love to hear from you.
Endpoint detection and response (EDR) experience. You can triage and investigate endpoint security alerts, take appropriate action within established procedures, and recognize when something needs to be escalated.
Vulnerability management experience. You understand the vulnerability lifecycle, including scanning, prioritization, remediation tracking, verification, and reporting.
Incident response fundamentals. You have working knowledge of detection, containment, eradication, and recovery and can execute established procedures while partnering with senior team members on higher-severity events.
System hardening and configuration management experience. You understand security baselines and can support configuration management, drift detection, and remediation.
Identity and access fundamentals. You're comfortable supporting routine access reviews, joiner/mover/leaver workflows, and day-to-day identity administration.
Strong security documentation habits. You produce clear, accurate procedures, incident records, configuration baselines, and security evidence, with the attention to detail needed in a regulated environment.
A proactive, ownership-oriented approach. You follow work through to completion, surface risks and blockers early, ask questions when something doesn't look right, and look for ways to improve how the work gets done.
Bonus: regulated-environment exposure. Familiarity with CMMC, NIST SP 800-171, aerospace, defense, manufacturing, or another regulated environment is helpful, but not required.
Bonus: broader technical exposure. Experience with identity providers (IdPs) and conditional access, data classification and DLP tooling, networking fundamentals such as VLANs, RADIUS/802.1X, and basic firewall concepts, or scripting and automation for security monitoring and reporting is a plus.
Collaborative Team Player: You believe the strongest security comes from working well with the people around you. You communicate clearly, ask good questions, and collaborate across IT, Engineering, Manufacturing, Workplace Ops, People, and other teams to solve problems and keep work moving. You know when to bring others in and approach security as a partner, not a blocker.
Creative Problem Solver: You're curious about why something isn't working and willing to dig in to figure it out. You don't just close the immediate ticket - you look for practical ways to improve the process, prevent the problem from happening again, or make the solution easier to manage as we grow.
Adaptable & Agile: You're comfortable working in a startup where priorities, systems, and processes will continue to evolve. You can shift gears when needed, learn new tools and processes quickly, and stay organized when several things are moving at once. You don't need every answer to already exist, but you know when to ask for help or escalate.
Innovative Mindset: You're driven by curiosity and a genuine interest in technology and security. You stay interested in emerging threats, tools, automation, and new approaches, and look for thoughtful ways to apply what you're learning to make 's security operations more effective.
is an Equal Opportunity Employer. We are committed to creating a diverse and inclusive work environment. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, disability, or any other characteristic protected by law.