Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 8 hours ago

Cybersecurity Engineer

Environmental Science Associates25 open roles

Pay
$110,000 – $135,000 a year
Where
Portland, Oregon, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity EngineerEnvironmental Science Associates · Portland, Oregon, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Environmental Science Associates's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.2% of postings close within 7 days. Measured by our own scanner across the market. Environmental Science Associates postings stay open a median of 27 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.8%3 days
  3. 8.2%7 days
  4. 15.2%14 days
  5. 34.2%30 days
This job: posted 8 hours ago

Environmental Science Associates median: 27 days open

The posting

Environmental Science Associates (ESA) is a 100% employee-owned environmental consulting firm. We plan, design, permit, mitigate, and restore for projects across our communities, infrastructure systems, open spaces, and wildlands. We are 50 years strong in 21 offices across California, the Pacific Northwest, and the Southeastern United States.

Environmental Science Associates (ESA) is looking for a Cybersecurity Engineer who wants to do more than monitor alerts. In this role, you will help strengthen and evolve the security program of a 100% employee-owned environmental consulting firm while protecting the systems, information, and technology our people rely on to deliver important work for clients across the country. You will join a collaborative technology team and work across security operations, cloud and endpoint security, identity and access management, threat detection, incident response, federal cybersecurity compliance, and emerging AI security.

This role is ideal for someone with a strong foundation in Microsoft security who enjoys investigating complex problems, strengthening security controls, and developing practical solutions to emerging threats. You will have meaningful opportunities to help shape how we secure new technologies, including AI-enabled systems, as they are adopted across the firm. This is a hybrid role with working onsite a few days per week in either our Portland, OR, and/or Seattle, WA offices.

What You Will Do

Strengthen ESA's Security Posture. Help evaluate, configure, and continuously improve security across endpoints, servers, cloud services, identities, and network environments. You will work extensively within ESA's Microsoft security ecosystem, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud, Entra ID, and Intune.

Detect and Respond to Threats. Monitor and investigate suspicious activity using Sentinel and Defender XDR. Perform alert triage, log analysis, and threat hunting; use Kusto Query Language (KQL) and Advanced Hunting to investigate security telemetry; tune detections to improve signal quality; and partner with ESA's Security Operations Center to investigate and resolve escalated incidents.

Advance Zero Trust Security. Help strengthen ESA's identity and device security using Conditional Access, multifactor authentication, least-privilege access, device compliance, and identity monitoring consistent with NIST and CISA Zero Trust principles.

Support Incident Response. Help develop, test, and execute security incident response procedures and playbooks. During an incident, you will assist with investigation, containment, evidence preservation, escalation, endpoint isolation, or disabling compromised accounts while coordinating with internal teams and external security partners.

Help Secure ESA's Use of AI. Work at the forefront of an evolving area of cybersecurity by helping ESA securely adopt AI systems, agents, models, MCP servers, connectors, and related technologies. You will help identify and mitigate risks including shadow AI, prompt injection, sensitive-data disclosure, excessive agent permissions, identity impersonation, poisoned data sources, compromised connectors, and insecure model outputs.

You will also help develop monitoring and incident-response approaches for AI-enabled systems and use AI-assisted security tools, including Microsoft Security Copilot, while validating AI-generated findings against authoritative source data and security telemetry.

Support NIST and CMMC Compliance. Help maintain ESA's NIST-based cybersecurity program and support environments involving Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). You will contribute to NIST SP 800-53 and NIST SP 800-171 control mapping, System Security Plans, Plans of Action and Milestones, evidence collection, remediation tracking, CUI scoping, CMMC readiness, and SPRS assessment activities.

Improve and Automate Security Operations. Evaluate emerging security tools, technologies, and techniques and identify opportunities to improve detection and response through automation tools.

Collaborate and Build Security Awareness. Work closely with IT colleagues, technology leadership, employees, clients, external security providers, and auditors. Help translate complex security concepts into practical guidance and contribute to security education and awareness across ESA.

What You Will Ideally Bring

  • 3–5 years of progressively responsible cybersecurity experience, including hands-on security operations or security engineering experience.
  • Experience across several areas such as endpoint security, identity and access management, cloud security, network security and monitoring, vulnerability management, SIEM/log analysis, incident response, secure configuration, or security automation.
  • Hands-on experience with Microsoft Defender XDR and at least two Microsoft security technologies such as Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, Microsoft Entra ID, or Microsoft Intune.
  • Experience with Microsoft Sentinel or a comparable SIEM, including investigating alerts, reviewing telemetry, and supporting analytics and detection rules.
  • Ability to use or demonstrated ability to quickly develop proficiency in Kusto Query Language (KQL).
  • Working knowledge of NIST SP 800-53, NIST SP 800-171, and CMMC within a federal contracting environment, including CUI scoping, System Security Plans, POA&Ms, and evidence collection.
  • Working knowledge of security incident response, including alert triage, containment, escalation, evidence preservation, documentation, and coordination with internal and external security teams.
  • Awareness of emerging AI cybersecurity risks, including shadow AI, prompt injection, sensitive-data exposure, compromised data sources and dependencies, excessive agent permissions, and identity impersonation.
  • The judgment to critically evaluate AI-generated security findings and validate recommendations against source telemetry, authoritative guidance, and established security procedures.
  • Ability to manage competing priorities and respond appropriately to occasional after-hours security incidents, audits, or maintenance activities.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or an equivalent combination of education, professional training, certifications, and relevant experience.

Just as important, you are curious, collaborative, and accountable. You enjoy understanding how things work, investigating what does not look right, and finding practical ways to make systems more secure. You can work independently while knowing when to escalate an issue, and you communicate technical security risks in a way that helps others make informed decisions.

Preferred Qualifications

We would be especially interested in candidates who bring one or more of the following:

  • Cybersecurity certifications such as CompTIA Security+, CySA+, SSCP, GIAC, or comparable credentials.
  • Microsoft certifications such as SC-200, AZ-500, or SC-300.
  • Experience supporting a federal contractor or organization subject to CMMC, FAR, DFARS, NIST SP 800-171, or related federal cybersecurity requirements.
  • Experience supporting a CMMC or NIST assessment, penetration test, tabletop exercise, external cybersecurity assessment, or third-party audit.
  • Experience with CUI asset inventories, data-flow documentation, security-control assessments, SPRS submissions, assessment evidence, or federal cyber-incident reporting.
  • Hands-on experience with Entra Conditional Access, MFA, Privileged Identity Management, device-compliance policies, DLP, or Microsoft Purview sensitivity labels.
  • Experience with vulnerability management and security automation using technologies such as Microsoft Defender Vulnerability Management, PowerShell, or Azure Logic Apps.
  • Familiarity with the NIST AI Risk Management Framework, NIST Generative AI Profile, or OWASP guidance for generative AI and LLM applications.
  • Familiarity with secure software-development practices, including threat modeling, secrets management, dependency and code scanning, API security, and CI/CD security.

Why ESA

At ESA, cybersecurity is not simply about implementing controls. We enable our employee-owners to work confidently, protect our clients and information, meet increasingly sophisticated cybersecurity requirements, and help the firm adopt new technologies responsibly.

You'll have the opportunity to work across traditional and emerging cybersecurity challenges, from Microsoft cloud security and threat hunting to CMMC readiness, Zero Trust, and AI security while contributing ideas that can directly influence how ESA's security program evolves.

If you are a security professional who likes to investigate, build, improve, and solve problems and you want your work to have visible impact, we'd like to hear from you.

ESA has established multiple pay ranges tailored to the economic factors in the geographies in which ESA staff reside. For this position, the range is approximately as listed based on our anticipated hiring locations as noted in the above job details. Actual compensation is determined by several factors including but not limited to an individual’s related experience, education, skills, and the city in which the applicant lives.

CA Pay Transparency Clause

$110,000—$135,000 USD

Who We Are

We are a 100% employee-owned environmental consulting firm who values diversity and inclusion and celebrate the differences that make each of us unique. Our culture is built on mutual respect, recognizing that our variety of backgrounds, experiences, and perspectives leads to better solutions, which fosters our continued success for our employee-owners and clients.

In accordance with ESA’s duty and responsibility to provide and maintain a safe workplace that is free of known hazards and to minimize the exposure to potential hazards, any employee who works from an ESA office or conducts any other in-person ESA work-related activity is required to submit their proof of vaccination status or have received an approved exemption and accommodation in states which this applies.

Please note: We do NOT accept unsolicited resumes from agencies

If you are an applicant with a disability that requires a reasonable accommodation to complete any part of the application process or are limited in the ability—or unable to use—the online application system and need an alternative method for applying, you may contact our Human Resources Department via email: [email protected] for assistance.

Please include the following in your message so we can promptly address your request:

  • Full name
  • The best method to contact you (phone number and/or email address)
  • Title of Job Position Applied
  • Description of your accommodation request

ESA is an Equal Opportunity Employer, committed to a diverse and inclusive work environment. (EOE M/V/F/D)

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Environmental Science Associates's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Environmental Science Associates's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Environmental Science Associates's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.