The posting
ABOUT THE TEPA COMPANIES
Established in 2005 and owned by the Paskenta Band of Nomlaki Indians, The Tepa Companies deliver comprehensive and sustainable solutions to federal, state, local, and private-sector clients throughout the United States. The tribally owned companies work independently and collaboratively to provide wide-ranging construction, engineering, environmental, industrial, staffing, and technology services.
When you join Tepa Companies, you have the opportunity to expand your entrepreneurial skill set while growing professionally alongside the best in the industry. You will have the opportunity to impact your team, the organization as a whole, and subsequently, our Tribe.
We seek out top talent to provide the best services for our clients. We focus on being a responsible company for our employees and their families by creating a culture that reflects our core values and offering competitive pay and benefits package. Our benefits package includes comprehensive medical, dental, vision, generous paid time off and holidays, 401(k) plan with company match, life insurance, flexible spending and health savings account, mental health support and resources, short and long-term disability, and tuition reimbursement.
ABOUT THE JOB
The Tepa Companies are seeking an Information Security Engineer to support the protection of Tepa’s information systems and digital assets through security operations, incident response, vulnerability management, and security engineering activities. This role serves as a technical responder for cybersecurity incidents and performs investigation, containment, remediation, and follow-up activities across Tepa’s Commercial and regulated environments.
Job Functions:
- Performs day-to-day security monitoring and incident response activities, including alert triage, investigation, containment, remediation, recovery, and documentation.
- Investigates security events and incidents using available endpoint, identity, network, cloud, SIEM, and other security telemetry.
- Coordinates with internal IT teams and third-party security providers during investigation and remediation of cybersecurity incidents.
- Identifies root causes and contributing factors following security incidents and recommends technical or procedural improvements to reduce recurrence.
- Implements, configures, administers, and maintains security platforms and controls supporting endpoint, identity, cloud, network, vulnerability management, and security monitoring.
- Performs vulnerability management activities, including vulnerability review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.
- Assists with security hardening and configuration management using established security baselines and guidance, including CIS Benchmarks, STIGs, and vendor security recommendations.
- Supports security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
- Develops and maintains security processes, standards, procedures, work instructions, diagrams, and other technical documentation.
- Maintains documentation supporting Tepa’s Commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
- Supports implementation and ongoing operation of security requirements associated with CMMC, NIST SP 800-171, and other applicable security and compliance frameworks.
- Collects and maintains technical evidence supporting security assessments, audits, control validation, and compliance activities.
- Collaborates with Infrastructure, Cloud, End User Services, GRC, and other business stakeholders to incorporate security requirements into operational processes and technical solutions.
- Assists with testing and validation of security controls and identifies opportunities to improve security effectiveness, automation, and operational maturity.
- Participates in incident response exercises, security assessments, and continuous improvement activities.
- Communicates security findings, risks, remediation requirements, and technical recommendations to both technical and non-technical stakeholders.
- Available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.
WHAT WE’RE LOOKING FOR
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or equivalent combination of education, training, and relevant professional experience.
- 5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.
- Hands-on experience investigating and responding to cybersecurity alerts and incidents.
- Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR), SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
- Experience supporting vulnerability identification, remediation, and security hardening activities.
- Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
- Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.
- Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
- Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
- Strong technical troubleshooting and analytical skills with the ability to independently investigate security events and determine appropriate remediation actions.
- Working knowledge of cloud, endpoint, network, identity, and application security concepts.
- Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
- Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
- Strong documentation skills with attention to accuracy, completeness, and auditability.
- Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions.
- Strong written and oral communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences.
- Strong collaboration skills and the ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
- Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.
Preferred Experience (not required)
- Experience securing Microsoft Azure and Microsoft 365 environments.
- Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
- Experience with Microsoft Government Community Cloud High (GCC High) environments.
- Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
- Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
- Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
- Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
- GCIH, Security+, CySA+, CISSP, or similar security certifications.
- Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
- Other relevant incident response, cloud security, or cybersecurity engineering certifications.
Equal Opportunity Employer/Veterans/Disabled
