Cybersecurity Engineer
Full Time • Portland, ME
We provide management and technology services to public and private sector client. The NCG Team comprised of professionals who bring specific and demonstrated expertise to every engagement by delivering business value through technology.
Benefits:
- 401(k)
- 401(k) matching
- Competitive salary
- Employee discounts
- Health insurance
- Opportunity for advancement
- Paid time off
- Training & development
- Vision insurance
- Wellness resources
Cybersecurity Engineer / Analyst
About Northcross Group
At Northcross Group (NCG), a Portland, Maine-based systems integration and cybersecurity firm, we support clients in the private and public sectors and address a variety of technology integration and cybersecurity initiatives. We provide quality business solutions and understand the importance of providing the same level of care to the people who will use it and the underlying data. These fundamentals—technology, data, and people—are all a part of the equation for success.
Opportunity Description
NCG is looking for a Cybersecurity Engineer with experience in assessing and building cybersecurity programs with a focus on penetration testing and DevSecOps. NCG supports clients in a broad range of industries (financial services, healthcare, transportation, and the Federal Sector) that are subject to number of regulatory requirements and industry standards for security.
NCG seeks a Cybersecurity Engineer with the programmatic and technical experience to provide direct client support and assessment functions aligned to applicable compliance frameworks. The Cybersecurity Engineer will work with our team helping clients develop and manage compliant infrastructures honed to meet the current remote/virtual workforce needs while addressing requirements for data and system security and privacy. This position will play a lead role in defining NCG corporate strategy in the cybersecurity space and alignment with other NCG system integration service offerings.
The Cybersecurity Engineer is responsible for performing penetration tests and security assessments on systems, networks, and applications. This role will also work with development and security teams to integrate security into the software development lifecycle.
Role & Responsibilities
We are looking for a hands-on Cybersecurity Analyst to collaborate with internal team members and clients to design, implement, and provide ongoing oversight of cybersecurity programs that align with industry and organizational considerations.
Responsibilities:
- Perform penetration tests and security assessments on systems, networks, and applications
- Identify and exploit vulnerabilities in order to assess and improve security posture
- Report findings and recommendations to development and security teams
- Work with clients to implement security improvements
- Work with development teams to fix security vulnerabilities
- Automate security testing and scanning throughout the software development lifecycle
- Develop and implement security best practices
- Train and educate developers on security best practices
- Engage with internal and external clients to ensure successful audience adoption
- Keep abreast of industry best practices
- Train and mentor junior team members
- Participate in NCG initiatives and contribute positively to our team environment
Required Qualifications
· Bachelor's degree and at least two years of relevant professional experience
· 3+ years of experience in penetration testing and/or security assessments
· 2+ years of experience in DevSecOps
· Experience with cybersecurity frameworks (NIST, FISMA, CMMC, etc.)
· Experience with security testing and scanning tools
· Strong understanding of networking, operating systems, and security concepts
· Experience with scripting languages such as Python or PowerShell
· Strong problem-solving and analytical skills
· Excellent communication and teamwork skills
· Excellent written and verbal communication and exceptional attention to detail
Preferred Qualifications
- Experience with offensive security tools and frameworks
- Certifications such as OSCP, CEH, or CISSP
- Experience with DevSecOps tools and practices
- Experience with containerization technologies such as Docker and Kubernetes
- Experience with cloud security tools and technologies
Benefits
At NCG, we have a commitment to excellence driven by continuous improvement across all areas of our business. We value our team members and offer competitive benefits, work/life balance, and opportunities for advancement. Benefits include:
- Competitive salary
- Employer-paid Health Insurance
- Dental Insurance
- Vision Insurance
- Employer contributing 401(k) Retirement Benefits
- Employer provided Life Insurance and Short- & Long-Term Disability Insurance
- Three weeks paid time off
- Eleven paid holidays
- Tuition and education benefits
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Northcross Group (NCG) is a cybersecurity and system integration consulting firm that works with clients in critical infrastructure industries across the US and internationally. NCG is headquartered in Portland, Maine with offices in Marquette and Washington, DC. We focus on empowering organizations and their people to overcome a range of major business challenges by providing them with the tools, support and sustainable programs they need to be successful.
NCG works with commercial businesses and the Federal Government to secure systems and data, building programmatic solutions to address challenges and seize opportunities. Technology, security, and risk management are core components of NCG’s consulting services. NCG’s service model focuses on the confluence of people, processes, data, and technology to deliver business value since its inception in 2006.
We balance technical, security, safety, risk, privacy, and compliance areas with consideration for organizational dynamics and corporate culture to craft effective solution paths. NCG provides professional services supported by tools and automation designed for each specific challenge and to help people collaborate and communicate. We leverage technology with expertise in management and industry requirements to support a range of efforts from Mergers & Acquisitions, Program Building, System Integration, and Process Improvements.
(if you already have a resume on Indeed)