Cybersecurity Engineer

Overview

In this role you will strengthen CAA’s security posture by delivering end-to-end protections for enterprise systems and data. You will develop and deploy tooling aligned with cybersecurity objectives and help translate threat intel into engineering roadmaps. You will collaborate with IT and security teams to ensure compliance, respond to incidents, and continuously improve technical controls. The opportunity combines hands-on security engineering with a fast-paced, cloud-forward environment where your work safeguards business operations and enables growth.

Responsibilities

• Define and evolve security tooling aligned to cybersecurity architecture and risk objectives
• Evaluate new and emerging threats against existing security controls; ensure controls remain effective to meet business objectives
• Translate threat intelligence and risk assessments into engineering roadmaps
• Review designs of major applications and upgrades for compliance with security architecture; deliver cross-team security integration capabilities
• Play an active role in security incident response to identify and mitigate threats
• Use security metrics to ensure controls meet objectives and drive continual improvement of tooling
• Support a security engineering culture focused on ownership and outcomes

Key requirements

• At least 10 years in Information Technology with infrastructure and development experience
• At least 2 years in information security
• Bachelor’s or Master’s Degree in a relevant field
• Scripting experience in PowerShell, Python, or JavaScript
• Experience implementing security tooling in Zero Trust, PKI, endpoint/workload protection, WAFs, secure email gateways, cloud security, and secure DNS
• Large-scale SIEM or security data lake implementations
• Strong understanding of servers, OS, networks, cloud services, and infrastructure
• Azure environment experience or strong knowledge of Azure

• Organized and methodical approach
• Strong collaboration across teams
• Problem-solving and analytical thinking
• PowerShell, Python, or JavaScript scripting
• Zero Trust and network segmentation
• PKI (public and private)

…