Senior Cybersecurity Engineer - Partially Remote

This position is Partially Remote. The pay range for this position is between $132,515 – $147,240 annually.

About Didi Hirsch

Didi Hirsch Mental Health Services has been a national leader in whole-person mental health, crisis care, and substance use services since 1942 and is home to the nation’s first Suicide Prevention Center. We are a nonprofit organization providing care to nearly 200,000 people annually across our programs. Didi Hirsch has deep roots in community-based mental health and a commitment to providing culturally responsive services that are just and equitable.  

As an organization, we value equity, diversity, and inclusion. More than 1,000 dedicated employees and volunteers make Didi Hirsch’s work possible. We intentionally recruit and retain a workforce that is reflective of the communities we serve and strive to cultivate a sense of belonging for them. We embrace employees and candidates from all backgrounds who want to help make this vision a reality.  

Summary

The Senior Cybersecurity Engineer will play a key role in protecting the company’s digital assets from cyber threats. This position involves leading the design and implementation of secure network solutions, managing security technologies, and responding to security incidents. The ideal candidate will have a strong technical background, in-depth knowledge of cybersecurity best practices, and a proactive mindset in approaching security challenges.

Primary Duties

• Lead and perform cybersecurity-related activities ranging from incident response to vulnerability assessments to mitigation implementation.
• Collaborate closely with cross-functional teams to assess, select, and onboard new cloud technologies, ensuring their integration aligns with our security standards and policies.
• Evaluate the security architecture of cloud platforms, identifying potential vulnerabilities and recommending appropriate controls and solutions.
• Lead the design and implementation of security measures such as Data Loss Prevention (DLP), Privileged Access Management (PAM), Enterprise-wide Vulnerability Management, Enhanced Encryption, Network Segmentation, and Logging.
• Leading technical projects involving multiple disciplines/teams.
• Design, implement, and manage security measures for the protection of computer systems, networks, and information.
• Identify and define system security requirements and integrate them into the company's IT infrastructure.
• Develop technical solutions and new security tools to mitigate security vulnerabilities and automate repeatable tasks.
• Prepare and document standard operating procedures and protocols.
• Configure and troubleshoot security infrastructure devices, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Ensure that the company’s data and infrastructure are protected by enabling the appropriate security controls.
• Participate in the change management process, analyzing potential security impact.
• Conduct proactive research to analyze security weaknesses and recommend appropriate strategies.
• Liaise with vendors to evaluate new security technologies and products.
• Lead incident response activities and investigate security breaches.
• Conduct security audits and provide recommendations to mitigate risks.
• Ensure compliance with the relevant security standards and frameworks.
• Provide technical supervision, guidance, and mentorship to junior security engineers and other team members.
• Stay up to date with emerging security threats, technologies, and trends.

Position Requirements

• Bachelor's or master's degree in computer science, Information Security, or a related field.
• Minimum of 7 years of experience in a Cybersecurity Engineering role.
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or similar.
• In-depth knowledge of security protocols, cryptography, authentication, authorization, and security.
• Good working knowledge of current IT risks and experience implementing security solutions.
• Experience implementing multi-factor authentication, single sign-on, identity management, or related technologies.
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
• Excellent written and verbal communication skills, as well as business acumen and a commercial outlook.
• Demonstrated ability to work independently and in a team environment.

Preferred Skills

• Experience with cloud platforms (Azure, AWS) and protecting cloud-based infrastructure.
• Familiarity with forensic analysis, penetration testing, and vulnerability assessments.
• Advanced understanding of network protocols and operating systems (Windows, Linux).