Cybersecurity Engineer

About Arcwood

Every advancement-from the products we use to the medicines and technologies we depend on-creates waste that must be handled responsibly. For more than 50 years, Arcwood Environmental has helped organizations across the United States manage the byproducts of progress safely and thoughtfully. With deep expertise and innovative waste management technology across a growing nationwide footprint, Arcwood protects people, communities, and the environment through work that often happens behind the scenes.

Our Values

We move forward together, one team with a shared purpose, counting on each other every day. Our core values demonstrate how we work together to deliver value for our customers, putting them at the center of all we do:

Lead with Safety: We uphold the highest safety and compliance standards to protect our teams, our customers and the communities that count on us.
• Solve Problems Creatively: We push for better - advancing technologies, processes, and ideas that protect human health and the environment.
• Own It Together: We are individually and collectively accountable for our work and our impact, knowing that progress is only achieved by working together - with our customers, and with each other.
• Deliver for Customers: We put customers at the center of all we do. When we live our values - lead with safety, solving problems creatively, and owning our work together - the result is clear: we deliver exceptional value for our customers.

We've reached a unique point as a company: big enough to deliver broad capability and consistent performance, while striving to be nimbler and more responsive to our customers' evolving needs. Come join Arcwood and be part of our legacy of environmental leadership!

Cybersecurity Engineer The Cybersecurity Engineer will work closely with members of the Cybersecurity team to develop and implement a comprehensive information security program and will perform a combination of security design and implementation work.

This role will conduct security testing, incident response, the integration of new products or enhancements and is responsible for supporting the production environment and will, in partnership with the broader IT department and business, configure and deploy technical controls that meet established security requirements.

• Prioritizes health and safety by adhering to policies, processes, and maintaining safe practices at all times
• Maintains responsibility for the configuration and maintenance of security tools, including but not limited to, identity and access management, endpoint security, log analysis and monitoring, intrusion detection and prevention, firewalls, vulnerability management, SFTP, and data loss prevention (DLP) solutions
• Coordinates and partners with appropriate IT personnel to implement security solutions
• Identifies security requirements for the security organization and the business based on need
• Identifies relevant audit log sources and configures logging between the source and SIEM solution
• Writes, tests and implements correlation rules within SIEM and security monitoring platforms to accurately detect, analyze and respond to potential security threats, ensuring alignment with organizational security polices, threat intelligence, and industry best practices
• Creates, documents, and implements security baseline configuration settings for systems in the enterprise
• Provides security evaluation and configuration of remote access management solutions
• Develops or leverages technology to automate targeted security functions
• Assists with technical reviews in the security certification process and makes recommendations for approval
• Develops and maintains documentation to support ongoing security system operations, maintenance, and specific problem resolution
• Provides technical reviews for risk and vulnerability assessments, incident response and change requests
• Supports, monitors, tests and troubleshoots security hardware and software issues
• In coordination with the IT department, tests, deploys and implements patches to vulnerabilities on security-related hardware and software
• Researches, evaluates and recommends cybersecurity hardware and software solutions and helps develop business cases for security investments
• Establishes and maintains processes and models to discover and remedy security incidents detected by network security appliances
• Partners with Security Analysts to conduct malware and forensic analysis and remediation
• Takes on additional duties as assigned to support the team and organization

• 5+ years of proven experience in a cybersecurity engineering role with demonstrated ownership of security projects or systems (required)
• Experience utilizing the below technologies / processes (required):
  • SIEM or Log Analysis
  • Email security
  • Endpoint detection and response
  • Identity and access management
  • Data loss prevention
  • Vulnerability management
  • Cloud services security
  • NIST 800-53, 800-171, and / or CMMC (preferred)