Job description

ABOUT THE ROLE Hut 8 is seeking a Cybersecurity Engineer to operate and continuously improve the controls that protect the company’s technology environment. This role is hands-on and operations-oriented, with day-to-day responsibility across security tooling, identity, endpoint, network, cloud, vulnerability management, monitoring, and incident response. The Cybersecurity Engineer is the day-to-day operator of the security capabilities designed and built by the Cybersecurity Architect. The role works closely with the Cybersecurity Architect, Technology Operations, Networking, Software, Data Engineering, Applied AI, Mining Operations, and external security partners to monitor, maintain, troubleshoot, and improve security operations. This role reports to the Cybersecurity Partner, with close alignment to the Cybersecurity Architect and broader Technology organization. What You'll Do Operate, maintain, and improve security controls across corporate IT, cloud, SaaS, data center, mining, and AI/compute environments. Configure, administer, and improve security technologies such as SIEM, EDR, vulnerability management, identity and access management, firewalls, email security, cloud security, and security monitoring platforms. Monitor security events, investigate alerts, support triage, and escalate potential incidents in accordance with documented procedures. Support incident response activities, including evidence collection, containment, eradication, recovery, root-cause analysis, and post-incident remediation. Manage vulnerability scanning, asset coverage, prioritization, remediation tracking, exception handling, and validation of fixes. Support identity and access controls, including MFA, SSO, joiner-mover-leaver workflows, privileged access, access reviews, service-account governance, and least-privilege improvements. Implement and maintain endpoint, network, cloud, and application security configurations in partnership with technology owners. Help secure APIs, integrations, CI/CD pipelines, production systems, and data platforms by applying approved security patterns and control requirements. Develop and maintain security automation, scripts, integrations, dashboards, and workflows that improve coverage, consistency, and response time. Participate in security architecture reviews, technical assessments, threat modeling, and control-validation exercises. Maintain accurate security documentation, asset information, diagrams, runbooks, operating procedures, and technical records. Support audit and compliance activities by gathering evidence, validating control operation, and helping remediate identified gaps. Work with vendors and managed security providers to troubleshoot issues, validate service performance, and deliver agreed improvements. Contribute to security testing, phishing exercises, configuration reviews, and other activities that improve organizational resilience. Stay current on relevant threats, vulnerabilities, defensive techniques, and changes to the company’s technology environment ABOUT YOU 3+ years of experience in cybersecurity, security engineering, systems administration, network engineering, cloud engineering, or a related technical role. Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; equivalent practical experience will be considered. Hands-on experience with security monitoring, SIEM, EDR, vulnerability management, identity and access management, endpoint security, firewalls, or cloud security tools. Working knowledge of networking, operating systems, authentication, authorization, encryption, logging, and common attack techniques. Experience investigating security alerts or incidents and documenting findings, actions, and follow-up remediation. Experience with at least one major cloud platform and familiarity with SaaS security and enterprise identity services. Ability to automate routine work using scripting or programming languages such as Python, PowerShell, Bash, or similar. Familiarity with security frameworks and control environments, including NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards. Strong troubleshooting, documentation, and communication skills, with the ability to work effectively with technical and non-technical stakeholders. Ability to prioritize work based on risk, business impact, and operational urgency. Relevant certifications such as Security+, CySA+, GSEC, GIAC, cloud security certifications, or vendor certifications are preferred. Practical, curious, and collaborative, with a willingness to take ownership and improve processes rather than simply operate them. ABOUT THE WORK ENVIRONMENT This role is in office at our corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Requirements

Must-haves

Operate, maintain, and improve security controls across corporate IT, cloud, SaaS, data center, mining, and AI/compute environments.
Configure, administer, and improve security technologies such as SIEM, EDR, vulnerability management, identity and access management, firewalls, email security, cloud security, and security monitoring platforms.
Monitor security events, investigate alerts, support triage, and escalate potential incidents in accordance with documented procedures.
Support incident response activities, including evidence collection, containment, eradication, recovery, root-cause analysis, and post-incident remediation.
Manage vulnerability scanning, asset coverage, prioritization, remediation tracking, exception handling, and validation of fixes.
Support identity and access controls, including MFA, SSO, joiner-mover-leaver workflows, privileged access, access reviews, service-account governance, and least-privilege improvements.
Implement and maintain endpoint, network, cloud, and application security configurations in partnership with technology owners.
Help secure APIs, integrations, CI/CD pipelines, production systems, and data platforms by applying approved security patterns and control requirements.
Develop and maintain security automation, scripts, integrations, dashboards, and workflows that improve coverage, consistency, and response time.
Participate in security architecture reviews, technical assessments, threat modeling, and control-validation exercises.
Maintain accurate security documentation, asset information, diagrams, runbooks, operating procedures, and technical records.
Support audit and compliance activities by gathering evidence, validating control operation, and helping remediate identified gaps.
Work with vendors and managed security providers to troubleshoot issues, validate service performance, and deliver agreed improvements.
Contribute to security testing, phishing exercises, configuration reviews, and other activities that improve organizational resilience.
Stay current on relevant threats, vulnerabilities, defensive techniques, and changes to the company’s technology environment
3+ years of experience in cybersecurity, security engineering, systems administration, network engineering, cloud engineering, or a related technical role.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; equivalent practical experience will be considered.
Hands-on experience with security monitoring, SIEM, EDR, vulnerability management, identity and access management, endpoint security, firewalls, or cloud security tools.
Working knowledge of networking, operating systems, authentication, authorization, encryption, logging, and common attack techniques.
Experience investigating security alerts or incidents and documenting findings, actions, and follow-up remediation.
Experience with at least one major cloud platform and familiarity with SaaS security and enterprise identity services.
Ability to automate routine work using scripting or programming languages such as Python, PowerShell, Bash, or similar.
Familiarity with security frameworks and control environments, including NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards.

Nice-to-haves

Relevant certifications such as Security+, CySA+, GSEC, GIAC, cloud security certifications, or vendor certifications are preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aici/cdpython

Platform: greenhouse
Effort: quick