Cybersecurity Engineer

Environmental Science Associates (ESA) is looking for a Cybersecurity Engineer who wants to do more than monitor alerts. In this role, you will help strengthen and evolve the security program of a 100% employee-owned environmental consulting firm while protecting the systems, information, and technology our people rely on to deliver important work for clients across the country. You will join a collaborative technology team and work across security operations, cloud and endpoint security, identity and access management, threat detection, incident response, federal cybersecurity compliance, and emerging AI security.

This role is ideal for someone with a strong foundation in Microsoft security who enjoys investigating complex problems, strengthening security controls, and developing practical solutions to emerging threats. You will have meaningful opportunities to help shape how we secure new technologies, including AI-enabled systems, as they are adopted across the firm. This is a hybrid role with working onsite a few days per week in either our Portland, OR, and/or Seattle, WA offices. 

What You Will Do

We would be especially interested in candidates who bring one or more of the following:

• →Cybersecurity certifications such as CompTIA Security+, CySA+, SSCP, GIAC, or comparable credentials.
• →Microsoft certifications such as SC-200, AZ-500, or SC-300.
• →Experience supporting a federal contractor or organization subject to CMMC, FAR, DFARS, NIST SP 800-171, or related federal cybersecurity requirements.
• →Experience supporting a CMMC or NIST assessment, penetration test, tabletop exercise, external cybersecurity assessment, or third-party audit.
• →Experience with CUI asset inventories, data-flow documentation, security-control assessments, SPRS submissions, assessment evidence, or federal cyber-incident reporting.
• →Hands-on experience with Entra Conditional Access, MFA, Privileged Identity Management, device-compliance policies, DLP, or Microsoft Purview sensitivity labels.
• →Experience with vulnerability management and security automation using technologies such as Microsoft Defender Vulnerability Management, PowerShell, or Azure Logic Apps.
• →Familiarity with the NIST AI Risk Management Framework, NIST Generative AI Profile, or OWASP guidance for generative AI and LLM applications.
• →Familiarity with secure software-development practices, including threat modeling, secrets management, dependency and code scanning, API security, and CI/CD security.

At ESA, cybersecurity is not simply about implementing controls. We enable our employee-owners to work confidently, protect our clients and information, meet increasingly sophisticated cybersecurity requirements, and help the firm adopt new technologies responsibly.

You'll have the opportunity to work across traditional and emerging cybersecurity challenges, from Microsoft cloud security and threat hunting to CMMC readiness, Zero Trust, and AI security while contributing ideas that can directly influence how ESA's security program evolves.

If you are a security professional who likes to investigate, build, improve, and solve problems and you want your work to have visible impact, we'd like to hear from you.

• Full name
• The best method to contact you (phone number and/or email address)
• Title of Job Position Applied
• Description of your accommodation request

ESA is an Equal Opportunity Employer, committed to a diverse and inclusive work environment. (EOE M/V/F/D)