<div>The Enviva team is driven by our shared vision for a renewable energy future. We are a fast-growing, purpose-driven, global energy company specializing in delivering sustainable wood bioenergy solutions. We are the world’s largest producer of sustainable wood pellets, which provide a low-carbon alternative to fossil fuels.</div>The Cyber Security Engineer reports to the Director of IT Infrastructure and Security and is responsible for leading security projects across the enterprise. This newly created position will be part of a high performing team and assist the Cyber Security Manager in driving the Enviva Cyber Security program, strategy, and road map to protect Enviva’s assets from security threats. A successful candidate will be a resourceful self-starter capable of owning security solutions and platforms end-to-end and will work closely with the Director of IT Infrastructure and Security, the Infrastructure team, and Technology Solution Center resources to advance security initiatives and support corporate objectives.Responsibilities<ul><li>Advance the Cyber Security road map and identify and lead security posture improvements</li><li>Maintain and optimize security software and tools</li></ul><ul><li>Evaluate capabilities and effectiveness of control environment and its individual controls and platforms and recommend required enhancements to the Cyber Security Manager</li><li>Liaise with the Managed Detection and Response (MDR) services provider and ensure quality delivery through reporting and governance</li><li>Investigate potential and confirmed security incidents, lead response efforts, lessons learned, and implementation of resulting proposed improvements</li><li>Work with members of IT, application and system owners, and the business where required to remediate systems and applications with detected vulnerabilities.</li><li>Work closely with peers in the Infrastructure team, the Infrastructure Architect, Application Development, to create and maintain a secure environment</li><li>Consult with lines of business to guide best practices and offer solutions when the need arises</li><li>Lead the threat and vulnerability management function leveraging vulnerability management tools and processes</li></ul>Qualifications <ul><li>A Bachelor’s degree in Information Technology, Information Systems, Engineering, or a related field. Any combination of advanced course enrollment, certification and years of relevant work experience can be substituted</li><li>10+ years of experience in IT</li><li>4 years of IT security experience designing or building security solutions and supporting security incident response.</li><li>Industry certifications, or demonstrated extracurricular participation in one or multiple security domains are required</li><li>A diverse technical skill set with the desire to stay “up to speed” with the changing threat landscape, trends, and security solutions on the market</li><li>Proficiency and experience in the below technical areas:<ul><li>Endpoint: OS hardening, endpoint management, endpoint protection/Anti-virus, disk encryption, USB protection</li><li>Network: UTM, TCP/IP, SSL/TLS, proxy, content filtering</li><li>Data: security implications of data-in-transit, at-rest, and in-use, DLP, DAG</li><li>Identity: SSO, MFA, authentication and authorization logic</li><li>Additional concepts: least privilege/least access, attack surface reduction, good knowledge of a wide range of applications, services, and protocols</li></ul></li><li>Demonstrated knowledge of tactics, techniques, and procedures (TTP’s) commonly used by threat actors and indicators of compromise (IoC’s)</li><li>Awareness of cyber attack models- MITRE Att&amp;ck, Cyber Kill Chain and how these translate to defense planning</li><li>Ability to quickly assess risk impact from environment changes like implementation of new solutions or software, network design change or integration, and modification of system features</li><li>Motivation and drive to “hunt” for threats or seek out optimization opportunities to improve effectiveness of controls</li><li>Ability to maintain a people, process, technology view through design, build, and run phases of service and capability delivery</li><li>Ability to handle multiple tasks, prioritize and meet deadlines</li><li>Familiarity with regulatory and legal obligations:<ul><li>SOX</li><li>ITGC</li></ul></li><li>Understanding of IT Security frameworks:<ul><li>NIST CSF</li><li>CIS CSC</li></ul></li><li>Excellent written and verbal communication skills</li><li>Able to lead or participate in Cyber Security incident response and investigations.</li></ul>Preferred Qualifications - What Will Set You Apart<ul><li>Desired Certifications (or equivalent demonstrable experience):<ul><li>One of the below:<ul><li>Microsoft Certified Cyber Security Architect Expert</li><li>Microsoft Certified Azure Security Engineer</li><li>CompTIA Security+</li></ul></li><li>Plus SANS certification demonstrating specialized knowledge within a security domain</li><li>Knowledge of PowerShell or other scripting languages</li></ul></li></ul>Travel requirements<ul><li>Up to 10% domestic travel to Enviva facilities. Occasional international travel may be required depending on future business needs.</li></ul>Working Conditions<ul><li>Normal office hours – however, could be longer hours when business requires. This position will assume a shared responsibility of ensuring applications are available 24x7x365.</li><li>Willing and able to maintain strict adherence to safety rules and regulations, to include wearing safety equipment.</li></ul>Physical Requirements<ul><li>Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards, including meeting qualitative and/or quantitative productivity standards.</li></ul> *This position does not offer visa sponsorship or support for work authorization*<div>EEO Statement Enviva is dedicated to the principles of equal employment opportunity (EEO) in any term, condition or privilege of employment. Enviva does not discriminate against applicants or employees on the basis of race, color, creed, religion, sex, national origin, age, physical or mental disability, ancestry, marital status, sexual orientation, gender identity or expression, veteran status, uniform service member, genetic information or any other status protected by law. Enviva complies with applicable state and local laws governing nondiscrimination in employment in every location in which we operate.</div>

<div class="org-about-module__description">
<div id="ember57" class="ember-view organization-about-module__content-consistant-cards-description">Enviva is the world&rsquo;s largest producer of sustainable wood pellets, a renewable alternative to fossil fuels. We manufacture our wood pellets using sustainable practices while maintaining and improving the health of our forests and reducing greenhouse gas emissions on a lifecycle basis around the world. Our wood pellets are exported through our deep-water marine terminals to customers in the United Kingdom, the European Union, Japan, and beyond, helping to accelerate the energy transition and de-fossilize hard-to-abate sectors like steel, cement, lime, chemicals, and aviation fuels. Enviva operates plants and ports in Alabama, Florida, Georgia, Mississippi, North Carolina, South Carolina, and Virginia, with corporate offices in four countries, employing more than 1,300 people around the globe. Together, we are dedicated to building a renewable energy future for generations to come. Enviva&rsquo;s mission is to displace fossil fuels, grow more trees, and fight climate change.</div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

Cloud Security Engineer

<div>The Enviva team is driven by our shared vision for a renewable energy future. We are a fast-growing, purpose-driven, global energy company specializing in delivering sustainable wood bioenergy solutions. We are the world’s largest producer of sustainable wood pellets, which provide a low-carbon alternative to fossil fuels.</div>The Cyber Security Engineer reports to the Director of IT Infrastructure and Security and is responsible for leading security projects across the enterprise. This newly created position will be part of a high performing team and assist the Cyber Security Manager in driving the Enviva Cyber Security program, strategy, and road map to protect Enviva’s assets from security threats.&nbsp;A successful candidate will be a resourceful self-starter capable of owning security solutions and platforms end-to-end and will work closely with the Director of IT Infrastructure and Security, the Infrastructure team, and Technology Solution Center resources to advance security initiatives and support corporate objectives.Responsibilities<ul><li>Advance the Cyber Security road map and identify and lead security posture improvements</li><li>Maintain and optimize security software and tools</li></ul><ul><li>Evaluate capabilities and effectiveness of control environment and its individual controls and platforms and recommend required enhancements to the Cyber Security Manager</li><li>Liaise with the Managed Detection and Response (MDR) services provider and ensure quality delivery through reporting and governance</li><li>Investigate potential and confirmed security incidents, lead response efforts, lessons learned, and implementation of resulting proposed improvements</li><li>Work with members of IT, application and system owners, and the business where required to remediate systems and applications with detected vulnerabilities.</li><li>Work closely with peers in the Infrastructure team, the Infrastructure Architect, Application Development, to create and maintain a secure environment</li><li>Consult with lines of business to guide best practices and offer solutions when the need arises</li><li>Lead the threat and vulnerability management function leveraging vulnerability management tools and processes</li></ul>Qualifications&nbsp;<ul><li>A Bachelor’s degree in Information Technology, Information Systems, Engineering, or a related field. Any combination of advanced course enrollment, certification and years of relevant work experience can be substituted</li><li>10+ years of experience in IT</li><li>4 years of IT security experience designing or building security solutions and supporting security incident response.</li><li>Industry certifications, or demonstrated extracurricular participation in one or multiple security domains are required</li><li>A diverse technical skill set with the desire to stay “up to speed” with the changing threat landscape, trends, and security solutions on the market</li><li>Proficiency and experience in the below technical areas:<ul><li>Endpoint: OS hardening, endpoint management, endpoint protection/Anti-virus, disk encryption, USB protection</li><li>Network: UTM, TCP/IP, SSL/TLS, proxy, content filtering</li><li>Data: security implications of data-in-transit, at-rest, and in-use, DLP, DAG</li><li>Identity: SSO, MFA, authentication and authorization logic</li><li>Additional concepts: least privilege/least access, attack surface reduction, good knowledge of a wide range of applications, services, and protocols</li></ul></li><li>Demonstrated knowledge of tactics, techniques, and procedures (TTP’s) commonly used by threat actors and indicators of compromise (IoC’s)</li><li>Awareness of cyber attack models- MITRE Att&amp;ck, Cyber Kill Chain and how these translate to defense planning</li><li>Ability to quickly assess risk impact from environment changes like implementation of new solutions or software, network design change or integration, and modification of system features</li><li>Motivation and drive to “hunt” for threats or seek out optimization opportunities to improve effectiveness of controls</li><li>Ability to maintain a people, process, technology view through design, build, and run phases of service and capability delivery</li><li>Ability to handle multiple tasks, prioritize and meet deadlines</li><li>Familiarity with regulatory and legal obligations:<ul><li>SOX</li><li>ITGC</li></ul></li><li>Understanding of IT Security frameworks:<ul><li>NIST CSF</li><li>CIS CSC</li></ul></li><li>Excellent written and verbal communication skills</li><li>Able to lead or participate in Cyber Security incident response and investigations.</li></ul>Preferred Qualifications - What Will Set You Apart<ul><li>Desired Certifications (or equivalent demonstrable experience):<ul><li>One of the below:<ul><li>Microsoft Certified Cyber Security Architect Expert</li><li>Microsoft Certified Azure Security Engineer</li><li>CompTIA Security+</li></ul></li><li>Plus SANS certification demonstrating specialized knowledge within a security domain</li><li>Knowledge of PowerShell or other scripting languages</li></ul></li></ul>Travel requirements<ul><li>Up to 10% domestic travel to Enviva facilities. Occasional international travel may be required depending on future business needs.</li></ul>Working Conditions<ul><li>Normal office hours – however, could be longer hours when business requires. This position will assume a shared responsibility of ensuring applications are available 24x7x365.</li><li>Willing and able to maintain strict adherence to safety rules and regulations, to include wearing safety equipment.</li></ul>Physical Requirements<ul><li>Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards, including meeting qualitative and/or quantitative productivity standards.</li></ul>&nbsp;*This position does not offer visa sponsorship or support for work authorization*<div>EEO Statement Enviva is dedicated to the principles of equal employment opportunity (EEO) in any term, condition or privilege of employment. Enviva does not discriminate against applicants or employees on the basis of race, color, creed, religion, sex, national origin, age, physical or mental disability, ancestry, marital status, sexual orientation, gender identity or expression, veteran status, uniform service member, genetic information or any other status protected by law. Enviva complies with applicable state and local laws governing nondiscrimination in employment in every location in which we operate.</div>

Cloud Security Engineer

About the Job

About the Company

Enviva

Similar Jobs

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)

Cloud Security Engineer

Cloud Security Engineer

Director of Information Security

Director of Information Security

Director, Cyber Security

Director, Cyber Security

Security Engineer, Cloud Infrastructure

Security Engineer, Cloud Infrastructure

Senior Security Analyst

Senior Security Analyst

Information Security Engineer

Information Security Engineer

Lead Cybersecurity Engineer - Compliance

Lead Cybersecurity Engineer - Compliance

Senior Information Systems Analyst (Cyber Security Analyst)

Senior Information Systems Analyst (Cyber Security Analyst)

Enterprise Security Architect

Enterprise Security Architect