Cybersecurity Engineer

Primary Purpose: Manage, deploy, assist, and sustain the organization's cyber and physical security systems. Review and supervise the organization's networks and security systems to detect weaknesses, vulnerabilities, proactively devise solutions, and conduct investigations. Acquire a comprehensive understanding of the company's IT infrastructure, maintain continuous monitoring, and assess potential threats that may compromise the network. Evaluate both internal and external threats to the organization's network and physical offices. Offer management and support for physical security systems, encompassing surveillance, access control, and visitor management systems, among others.

Essential Duties & Responsibilities

• Manage, implement, support, and uphold the security infrastructure systems (both cyber and physical) for the Cleveland Guardians, aligning with the Information Systems operating practices of the team
• Serve as the subject matter expert for supported security technologies, and act as subject matter expert during escalations
• Maintain continuous monitoring and assessment of computer networks and systems for threats and security breaches
• Accountable for conducting security vulnerability assessments and on-demand as well as scheduled penetration testing
• Partner with department leadership to define, design and implement secure networking capabilities
• Prepare reports on security incidents and changing responses
• Document and report on alerts, incidents, breaches, and assess the impact and/or risk to the organization
• Oversee maintaining test and operational environments to include all cybersecurity tool sets and collaborating with the end-user, network and safety and security teams to uncover vulnerabilities and risks in our environment 
• Partner with internal department teams to ensure they effectively utilize, leverage, and employ tools needed to perform their jobs
• Lead root cause analysis and problem resolution for all organizational cybersecurity issues
• Maintain knowledge of industry trends and real-time awareness active alerts / threats
• Develop company-wide processes, procedures, practices, and training opportunities to assist colleagues in understanding how security affects our data, jobs, and everyday lives
• Ensures compliance to audit, regulatory and legal requirements

Education & Experience Requirements

• At least 7 years Information Technology/Systems experience
• Minimum 5 years of direct experience in a Cybersecurity support role involving security assessments, vulnerability management, or similar
• Bachelor of Sciences or Business in Information Systems, Information Technology, or Computer Sciences is preferred 
• Knowledge of and experience with serverless and traditional on-premises architectures (network, storage, compute, security, services, platforms) and concepts
• Knowledge of and experience with Windows and Linux operating systems
• Knowledge of and experience with at least one scripting language (Python, BASH, PowerShell, etc.) 
• Knowledge of and experience with penetration testing, network security, and the techniques used to expose and correct security flaws 
• Knowledge of Cyber security vulnerability assessment, scanning tools, procedures, and best practices.
• Knowledge of Identity Access and Privileged Access management solutions
• Knowledge of physical security systems such as, but not limited to surveillance, access control, visitor management.
• Knowledge of and experience with security technologies including firewalls, proxies, SIEM, antivirus software, and IDPs
• Knowledge of DevOps environments using Terraform, Gitlab, and CI/CD Pipelines
• Knowledge of cloud service providers including, but not limited to GCP, AWS, and Azure a plus
• Knowledge of Kubernetes and/or Docker container security

Job Skills

• Demonstrated ability to think critically and innovatively about security solutions that can keep data safe while still allowing a business to flourish 
• Ability to express and document technical details effectively for diverse audiences, including both technical and non-technical stakeholders

Job Requirements

• Required to work 100% of all jewel events (Opening Day, Post Season, etc.)
• Required to work irregular hours and long shifts as the business dictates.
• Robust problem-solving skills and inherent decision-making ability.
• Ability to quickly analyze and respond appropriately to issues in time-sensitive and critical situations
• Demonstrated proficiency in project and task management, coupled with the capability to organize and prioritize work efficiently
• Capacity to uphold a team-first mindset; Willingness to address challenges collaboratively within a team environment, with an impartial consideration of various approaches
• Capability to tackle complex and ambiguous challenges, demonstrating the initiative to remain actively engaged until a solution is successfully delivered

Organizational Requirements

• Reads, speaks, comprehends and communicates English effectively in all communications.
• Represents the Cleveland Indians in a positive fashion to all business partners and the general public.
• Ability to develop and maintain successful working relationship with members of the Front Office.
• Ability to act according to the organizational values and service excellence at all times.
• Ability to work with multicultural populations and have a commitment to fairness and equality.
• Ability to walk, sit or stand for an entire shift.
• Ability to work extended days and hours, including holidays and weekends.
• Ability to move throughout all areas and levels of the Ballpark.
• Ability to work in a diverse and changing environment.
• Occasional physical activity such as lifting and carrying boxes up to 55lbs.

The Cleveland Guardians are committed to developing and maintaining an environment that embraces all forms of diversity to enrich our core values, enhance our competitive position, strengthen our impact within our community, and foster a greater sense of belonging for our employees.

In this spirit, we know studies have shown that people from historically underserved groups - including women and people of color - are less likely to apply for jobs unless they believe they meet every one of the qualifications as described in a job description. We are most interested in finding the best candidate for the job and understand that candidate may bring certain skills and experiences to the role that are not listed above, but that would add tremendous value to our organization. We would encourage you to apply, even if you don't believe you meet every one of our qualifications described.