IT Security Engineer

CMT is looking for a highly motivated and collaborative IT Security Engineer to join the CMT team. Reporting to the leader of IT Security, you will work in a highly collaborative role, mostly focused on the execution of assigned tasks relating to information technology security, infrastructure, and IT-managed cloud solutions. This role will also serve as a Tier-3 escalation point for our internal Help Desk. This is a hybrid role that requires in-office presence at CMT's headquarters in Cambridge, Massachusetts, at least 3 days per week, or as the work demands.

Responsibilities

Use independent judgment and discretion to execute assigned tasks in an efficient and effective manner; Collaborate with colleagues to implement and update IT processes and infrastructure; Implement solutions and controls that support adherence to CMT policy; Understand security governance control and implement best practices in IT-controlled environments (SaaS, email security, IdP, etc.); Proactively investigate and remediate emerging vulnerabilities impacting endpoints and SaaS tools; Act as tier 1 incident responder for remediating security incidents, exploits or alternative security events; Assist in maintaining playbooks for common threats (e.g., email quarantining, phishing, compromised endpoints, internal network intrusion); Collaborate with security stakeholders and other IT personnel on security-related projects; Assist with regular security audits on IT systems; Provide incident support when needed, including response, containment, remediation, and go-forward activities; Participate in tabletop exercises when needed; Respond to security detections, reviewing alerts for false positives or providing next steps for remediation; Advanced understanding of Datadog's product and technology, including advanced queries and alert configuration; In-depth knowledge of Jamf's Security Cloud offering; Research, recommend, and implement new technologies and features; Apply scripting and code development knowledge to identify security risks within code artifacts, scripts and packages as needed; Complete any additional tasks as they arise; Serve as a Tier-3 escalation point for the internal Help Desk

Requirements

Bachelor's degree or equivalent years of experience and/or certification in a related field; 2+ years in IT Security; 2+ years of experience with macOS, iOS/iPadOS, and Windows management in an enterprise environment in a security role; Excellent verbal and communication skills; Understanding of common cloud provider ideologies

Nice to have

Practical experience executing security-centric tasks; Experience with AWS management, Tableau, OneLogin, Sophos, and G-Suite; CompTIA Security+; Jamf 200+ Certification; (ISC)2 CISSP, CCSP, or SSCP

Benefits

Fair and competitive salary based on skills and experience; Annual performance bonus; Equity may be awarded in the form of Restricted Stock Units (RSUs); Medical, Dental, Vision and Life Insurance; Matching 401k; Short-term & long-term disability; Parental leave; Unlimited Paid Time Off including vacation, sick days & public holidays; Flexible scheduling and work from home policy depending on role and responsibilities; Summer Fridays with half days; Employee resource groups (Black, AAPI, LGBTQIA+, Women, Book Club, Health & Wellness); Comprehensive wellness, education, and employee assistance programs