Cyber Security Engineer

<h2><strong>ABOUT THE JOB</strong></h2> <p>The ACLU seeks applicants for the full-time position of <strong>Cybersecurity Engineer</strong> in the <strong>Information Security Department</strong> of the ACLU’s National office in <strong>New York, NY. </strong><span data-ccp-props="{"><span class="TextRun SCXW106118647 BCX0" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW106118647 BCX0">This is a <strong>hybrid role </strong>that has in-office requirements of two (2) days per week or eight </span></span><span class="TextRun SCXW106118647 BCX0" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW106118647 BCX0">(8) days per month.</span></span></span><span class="EOP SCXW106118647 BCX0" data-ccp-props="{"> </span></p> <p>Director of Security Architecture Engineering, this hands-on technical role is responsible for securing the ACLU’s infrastructure, endpoints, and cloud services by reducing vulnerability risk, improving control enforcement, and operationalizing core data protection strategies.</p> <p>This role is ideal for a security engineer who thrives at the intersection of infrastructure, identity, and data — someone ready to roll up their sleeves to turn policy into technical enforcement. The engineer will drive progress across cloud posture, endpoint compliance, DLP, and insider risk detection, ensuring controls are not just defined but deployed, measurable, and resilient in production environments.</p> <p><span data-teams="true">This position is part of a collective bargaining unit. It is represented by ACLU Staff United (ASU).</span></p> <h2><strong>WHAT YOU'LL DO</strong> </h2> <p>Reporting to the <strong>Director of Security Architecture Engineering</strong>, the <strong>Cybersecurity Engineer </strong>will be accountable for executing core infrastructure and endpoint security priorities across cloud, network, and device environments.</p> <h2><strong>YOUR DAY TO DAY</strong></h2> <ul> <li>Implement and manage cloud security posture tooling and alerts, ensuring visibility into configuration drift, overexposure, and high-risk services.</li> <li>Lead the vulnerability management lifecycle — including scanning, prioritization, stakeholder coordination, remediation tracking, and reporting.</li> <li>Deploy and enforce secure configuration baselines across managed devices (Windows, macOS, mobile), including disk encryption, patch compliance, and privileged access.</li> <li>Identify exposed services and reduce attack surface across infrastructure and endpoint environments using automation and policy-based enforcement.</li> <li>Develop and maintain secure configuration management practices across IAM, network segmentation, endpoint posture, and SaaS platforms.</li> <li>Engineer and support enterprise Data Loss Prevention (DLP) tooling, including policy definition, control enforcement, and incident response workflows across email, endpoint, and cloud.</li> <li>Implement and tune insider threat detection signals using endpoint telemetry, behavior analytics, and identity context, in coordination with Security Operations.</li> <li>Serve as a technical escalation point for endpoint, cloud, and identity security issues impacting control integrity or coverage.</li> </ul> <h2><strong>FUTURE ACLU'ERS WILL </strong></h2> <ul> <li>Be committed to advancing the mission of the ACLU</li> <li>Center and embed the principles of equity, inclusion and belonging in their work by demonstrating commitment to diversity with an approach that respects and values multiple perspectives</li> <li>Be committed to work collaboratively and respectfully toward resolving obstacles and conflicts</li> </ul> <h2><strong>WHAT YOU'LL BRING</strong></h2> <ul> <li>Demonstrated experience in security engineering, cloud/infrastructure security, or endpoint protection.</li> <li>Strong working knowledge of DLP, data classification, and endpoint telemetry tooling (e.g., Microsoft Purview, Intune, Defender for Endpoint, Jamf, etc.).</li> <li>H ... (truncated, view full listing at source)