Latest AI JobsBrowse Jobs
Environmental Science Associates logo

Cybersecurity Engineer

Environmental Science AssociatesPortland, Oregon, United StatesCorp-Technology Services CO99:10
Apply on company site
Salary
$110K — $135K USD
Job type
Full-time
Experience
Mid · 3+ yrs
Posted
8 Oct 2026
Status
Open · checked 7d ago

About this role

Environmental Science Associates is hiring a Cybersecurity Engineer to strengthen and evolve the security program for an employee-owned environmental consulting firm located in Portland, Oregon and Seattle, Washington. This hybrid position suits a professional with a strong foundation in Microsoft security who enjoys investigating complex problems and protecting essential systems.

Role Overview

Environmental Science Associates is seeking a Cybersecurity Engineer to join a collaborative technology team in Portland, Oregon or Seattle, Washington. The professional in this hybrid role will protect internal systems, information, and technology across endpoints, cloud services, and network environments. The position focuses on security operations, threat detection, incident response, Zero Trust implementation, and emerging AI security.

Key Responsibilities

Evaluate, configure, and continuously improve security across endpoints, servers, cloud services, identities, and network environments within the Microsoft security ecosystem.
Detect and respond to threats by monitoring suspicious activity, performing alert triage and log analysis, and utilizing Kusto Query Language.
Advance Zero Trust security principles by strengthening identity and device security using multifactor authentication and least-privilege access.
Support security incident response procedures, assist with containment and evidence preservation, and coordinate with internal teams and external partners.
Secure the adoption of AI systems, models, and connectors by identifying risks such as shadow AI, prompt injection, and excessive permissions.
Maintain the NIST-based cybersecurity program and support compliance activities involving Federal Contract Information and Controlled Unclassified Information.
Collaborate with IT colleagues, leadership, employees, and auditors to translate complex security concepts into practical guidance.

Requirements

Three to five years of progressively responsible cybersecurity experience, covering security operations or security engineering.
Hands-on experience with Microsoft Defender XDR and at least two additional Microsoft security technologies.
Experience with Microsoft Sentinel or a comparable SIEM for investigating alerts and reviewing telemetry.
Demonstrated ability or quick proficiency in Kusto Query Language.
Working knowledge of NIST SP 800-53, NIST SP 800-171, and CMMC within a federal contracting environment.
Working knowledge of security incident response, alert triage, and containment procedures.
Awareness of emerging AI cybersecurity risks and the judgment to validate AI-generated findings against authoritative source data.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or an equivalent combination of education, training, and experience.

Nice to Have

Cybersecurity certifications such as CompTIA Security+, CySA+, SSCP, or GIAC.
Microsoft certifications including SC-200, AZ-500, or SC-300.
Experience supporting federal contractors or organizations subject to CMMC, FAR, DFARS, or NIST frameworks.
Experience with CMMC or NIST assessments, penetration tests, table-top exercises, and third-party audits.
Hands-on experience with Entra Conditional Access, MFA, Privileged Identity Management, device compliance, or Microsoft Purview.
Experience with vulnerability management and security automation utilizing PowerShell or Azure Logic Apps.

Skills and Tools

Microsoft Sentinel
Microsoft Defender XDR
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Microsoft Defender for Identity
Microsoft Defender for Cloud
Microsoft Entra ID
Microsoft Intune
Kusto Query Language (KQL)
Microsoft Security Copilot
PowerShell
Azure Logic Apps

Salary and Benefits

Salary range of $110,000 to $135,000 USD.

About the Company

Environmental Science Associates is a 100% employee-owned environmental consulting firm with fifty years of history across twenty-one offices. The organization plans, designs, permits, mitigates, and restores projects for communities, infrastructure systems, open spaces, and wildlands.

How to Apply

Candidates should apply on the official company careers page.

Skills and tech stack

Questions candidates ask

What is the location of the Cybersecurity Engineer position?

This is a hybrid role requiring work onsite a few days per week in either the Portland, Oregon or Seattle, Washington offices.

What is the salary range for this role?

The salary range is between $110,000 and $135,000 USD.

How many years of experience are required?

The role requires 3 to 5 years of progressively responsible cybersecurity experience, including hands-on security operations or security engineering.

What educational background is needed?

A bachelor's degree in Cybersecurity, Computer Science, Information Systems, or an equivalent combination of education, professional training, certifications, and relevant experience is required.

What compliance frameworks are relevant to this position?

The position involves working knowledge of NIST SP 800-53, NIST SP 800-171, and CMMC within a federal contracting environment.

Ready to apply?

The application is on the official Environmental Science Associates careers page.

Apply on company site