Cybersecurity Engineer
Environmental Science Associates · Portland, Oregon, United States
About the role
Cybersecurity Engineer at Environmental Science Associates, an employee-owned environmental consulting firm, with a remit spanning SOC work, endpoint and cloud protection, identity, incident response, federal compliance and AI security. The role is hybrid, with a few office days a week in Portland or Seattle.
The engineer works mostly in Microsoft's security stack (Sentinel, Defender XDR, Entra ID, Intune), triaging alerts and hunting with KQL, tuning detections, tightening Conditional Access and device compliance, helping run incident response with the SOC partner, guarding the firm's adoption of AI agents and connectors, and supporting NIST 800-171 and CMMC work such as System Security Plans and POA&Ms. ESA wants three to five years in hands-on security operations or engineering, Defender XDR and Sentinel experience, and working knowledge of NIST and CMMC.