Cybersecurity Engineer

ABOUT THE ROLE The Cybersecurity Engineer is responsible for independently executing defined security engineering and operational work across Accela’s endpoints, identities, cloud platforms, and enterprise systems. This role applies established security standards and practices to troubleshoot issues, maintain technical controls, analyze findings, implement solutions, and identify opportunities to improve how the team operates. The Cybersecurity Engineer partners with IT, Engineering, DevOps, IAM, Compliance, and other teams to maintain effective technical safeguards while supporting business continuity. The role is expected to independently manage routine and moderately complex work, make sound decisions within established practices, and escalate highly complex or unfamiliar matters to senior engineers or security leadership as appropriate. The ideal candidate brings strong enterprise IT experience, hands-on exposure to security technologies, and the ability to take ownership of assigned work from identification through resolution. This individual is also expected to identify recurring issues, recommend process or automation improvements, and continue building technical depth across security tooling, cloud platforms, and enterprise systems. SPECIFIC RESPONSIBILITIES • Independently manage endpoint security and compliance activities across Windows, macOS, and Linux environments, including security baselines, EDR and antivirus agents, disk encryption, MDM, and operating system hardening. • Administer and troubleshoot identity and access controls, including account provisioning and deprovisioning, SSO, MFA, conditional access, and authentication issues. • Monitor and analyze alerts and logs within SIEM, EDR, and related platforms, perform initial triage, take appropriate action within established procedures, and escalate complex findings when necessary. • Conduct initial technical investigations by gathering and analyzing evidence, documenting findings, and recommending appropriate next steps. • Manage assigned vulnerability-management activities, including reviewing scan results, evaluating severity and exploitability, coordinating remediation with system owners, and tracking work through completion. • Perform periodic access reviews, recertification activities, privileged-access reviews, and third-party access validation to support least-privilege practices. • Own defined workstreams within security technology implementations, including planning, testing, configuration, pilot deployments, documentation, and rollout support. • Maintain assigned technical controls and support evidence collection and control activities associated with SOC 2, HIPAA, ISO 27001, NIST CSF, and other applicable frameworks. • Develop and maintain scripts or automation using tools such as PowerShell, Bash, or Python to reduce manual effort and improve operational consistency. • Independently troubleshoot routine and moderately complex technical issues and coordinate with appropriate teams to drive issues through resolution. • Partner with IT, Engineering, DevOps, IAM, and Platform teams to validate technical findings, test configuration changes, and provide security guidance before broader deployment. • Identify recurring operational issues and recommend improvements to processes, tooling, configurations, automation, or documentation. • Create and maintain technical documentation, runbooks, workflows, and knowledge resources that enable consistent execution and effective knowledge sharing. • Use operational data and technical findings to identify trends and recommend improvements to security practices and processes. • Contribute to continuous improvement of team workflows by identifying opportunities to simplify work, improve consistency,