Cyber Security Engineer

We're hiring on behalf of a Haystack partner!

The Role

• Serve as the technical focal for GRC automation, developing automated evidence collection, control testing, risk intelligence, and AI-enabled governance capabilities.

• Collaborate with cross-functional teams to design and build deterministic control-testing logic and AI agents for reasoning, summarization, and judgment.

• Conduct detailed analyses of cybersecurity solutions to assess control effectiveness and cybersecurity risk, resolving complex technical issues.

• Leverage cybersecurity assessments, standards, and compliance frameworks to ensure compliance across security systems.

• Analyze existing processes and procedures, leading efforts for improvements, automation opportunities, and remediation activities.

• Investigate and analyze cyber incidents, control failures, and compliance exceptions, assisting in the development of risk mitigation and remediation plans.

What You'll Need

• Bachelor’s Degree in Information Technology, a related field, or equivalent experience.

• 5+ years of relevant experience required.

• Experience designing, implementing, and scaling GRC, CCM, or compliance automation solutions within a regulated environment.

• Proficiency in Python or comparable automation technologies for developing automated workflows and REST API-based data integrations.

• Hands-on experience integrating security control data sources into a GRC/CCM evidence pipeline across multiple domains.

• Familiarity with AI risk frameworks such as NIST AI RMF or OWASP LLM Top 10 is preferred.

What's On Offer

• Competitive annual salary (salary not specified in original description) plus bonus potential.

• Comprehensive benefits package including health, vision, and dental insurance.

• Opportunities for professional growth and development within a leading energy industry company.

• Access to a 401k matching program and paid parental leave.

Apply via Haystack today!