Apply on Employer Site

The National WWII Museum · 13 hours ago

Cybersecurity Engineer

New Orleans,LA,US

Full-time

Onsite

Mid, Senior Level

3+ years exp

The National WWII Museum is currently seeking a Cybersecurity Engineer responsible for the day-to-day execution and continuous improvement of the museum’s cybersecurity program. The role involves security monitoring, vulnerability management, incident response, and implementation of security controls, while translating security priorities into effective technical protections.

Association

Responsibilities

Monitor and triage security alerts from endpoint protection, identity platforms, and logging systems

Investigate and respond to security incidents in coordination with IT Infrastructure

Maintain incident documentation and post-incident remediation tracking

Operate routine vulnerability scanning across servers, endpoints, network devices, and supported systems

Testing, identifying, and remediating system and network vulnerabilities through continuous vulnerability management

Prioritize findings based on risk, exploitability, threat intelligence, and business impact, and document accepted risk where remediation is deferred

Coordinate remediation with Infrastructure and Application teams

Track vulnerabilities through closure

Own endpoint security tooling health, configuration, and tuning

Enforce MFA, Conditional Access, and service account hygiene

Ensure security controls are consistently implemented across endpoints, servers, networks, and cloud services

Lead privileged access reviews and remediation

Partner with Infrastructure to improve network segmentation and reduce lateral movement

Lead firewall rule review, validation, and documentation

Ensure secure configuration of kiosks, AV systems, and operational technology where feasible

Designing, implementing, and upgrading security measures to protect organizational data, infrastructure, and networks

Expand log coverage to support investigation and compliance needs

Ensure logs are retained and accessible for incident analysis

Support SIEM-lite or centralized logging improvements

Translate NIST-aligned requirements into operational controls

Participate in tabletop exercises and recovery testing

Recommend improvements based on threat intelligence and incident trends

Contribute to risk assessments, security metrics, and executive reporting

Assist in maintaining cybersecurity policies, standards, and technical procedures

Participating in the change management processes to ensure new systems and changes meet security requirements before deployment

Perform other duties as assigned

Qualification

Cybersecurity controls implementationIncident response leadershipVulnerability managementNIST Cybersecurity FrameworkEndpoint Detection & ResponseIdentity & Access ManagementCloud securitySecurity certificationsTroubleshooting skillsDocumentation skillsCommunication skillsSelf-motivated

Required

3–7 years of Experience operating in a multi-site or hybrid environment with a mix of on-premises and cloud infrastructure

Demonstrated ability to translate technical risk into business-relevant language for non-technical stakeholders

Demonstrated experience designing, implementing, and improving security controls, not only monitoring or reporting

Hands-on experience with: Endpoint Detection & Response (EDR) platforms, Vulnerability scanning and remediation workflows, Identity & Access Management, MFA, and Conditional Access and Windows operating systems and network security fundamentals

Proven ability to lead technical incident response, including containment and remediation

Experience working directly with infrastructure and application teams to reduce risk

Familiarity with the NIST Cybersecurity Framework and modern security best practices

Strong troubleshooting, documentation, and communication skills

Self-motivated and able to work independently or within a team environment

As needed, be willing to work a flexible schedule that may extend outside of the typical 40-hour work week, including weekends and evenings, to complete tasks and meet deadlines