First things First: Who are we?

Twice the size of our next largest competitor, First Student is the leading school transportation solutions provider in North America. Every day, we complete 5 million student journeys, moving more passengers than all U.S. airlines combined. With a team of highly trained drivers and the industry’s strongest safety record, First Student delivers reliable, quality services including full-service transportation and management, special-needs transportation, route optimization and scheduling, maintenance, and charter services for 1,100 school district contracts.

The Cyber Security Engineer will serve as a subject matter expert in areas relating to cybersecurity services, technologies, and applications. In this role you will partner with peers and advise management on technical/program issues concerning the security of systems/applications, data, and networks. You will have a unique opportunity to serve as a security integrator, working to address vulnerabilities and risk in new and large complex applications, systems, and networks across the enterprise.

Responsibilities:

• Identify and assess: Continually assess the threat landscape relative to internal controls and processes. Develop organizational awareness to effectively identify cybersecurity risks to systems, people, assets, data, and capabilities. Understand the business context, identify systems and processes that support critical functions, to prioritize and apply efforts consistent with the cybersecurity strategy.
• Securely build & protect: Work closely with the IT department on corporate technology development to fully secure, computer, network, and processing systems. Assess and communicate all cyber security risks associated with technology purchases or practices performed by the company.
• Monitor, hunt, detect: Lead the growth and operation of the Security Operations Center (SOC). Includes monitoring, incident response, situational awareness, vulnerability management, internal and external threat management, and investigations.
• Respond, recover, sustain: Lead Cybersecurity Emergency Response activities. Contribute to the maintenance and testing of disaster recovery and business continuity plans, procedures, audits, and enhancements.
• Govern, manage, comply, & manage risk: Contribute to the design and execution of applicable polices, and programs. Align with regulatory requirements, industry best practices, established frameworks and standards, and company culture. Drive the execution of cybersecurity risk assessments, 3rd party risk management and security exception management. Manage security service providers and relationships between internal resources and external entities, including government, vendors, and partner organizations.

Desired qualifications:

• Bachelor’s degree in Computer Science, Management, Business, Information Technology, or equivalent
• 5+ years of cybersecurity experience, strong foundation in cloud and IT infrastructure.
• Hold cybersecurity industry certifications (E.g. GSEC, CCSP, CEH, CISSP, CISM).
• Other industry certifications a plus (E.g. ITIL, CCNA, MCSE).
• Demonstrated awareness of cybersecurity trends and cyber criminal's tools, tactics, and procedures.
• Experience in conducting vulnerability assessments, penetration testing, and incident response activities.
• Proficient with Python, Power Shell, or other scripting/programming languages.
• Strong understanding of network protocols, system vulnerabilities, and security technologies such as firewalls, vulnerability scanners, SIEM, and endpoint protection (e.g. Rapid7, Logrhythm, Crowdstrike, Zscaler, etc.).
• Strong Active Directory and Windows client/server experience.
• Experience with industry identity concepts (MFA, IGA/IAM/PAM).
• Excellent understanding of project management (Agile and Waterfall) principles.
• Demonstrated ability to collaborate with IT in solving security problems.
• In-depth knowledge of cloud computing platforms (AWS, Azure, Oracle) and associated security controls.
• Familiar with Cybersecurity frameworks: NIST, ISO 27000 series, CIS controls.
• Experience with PCI / CCPA / HIPAA standards.
• Familiarly with SAST/DAST is a plus.
• Excellent analytical and problem-solving skills, with the ability to prioritize and manage multiple tasks in a fast-paced environment.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate complex security concepts to diverse stakeholders.
• High level of integrity, attention to detail, and a proactive approach to cybersecurity.

First for a Reason  

Benefits 

We offer competitive compensation and benefits (which vary based on role, location, and business), including physical and mental health initiatives, medical/dental/vision, and paid holiday/vacation. 

Professional Advancement 

Start here. Go far. We believe in promoting from within which means tremendous opportunities for you, thanks to our strong presence across North America. In addition, our 3 to 5 month Manager-In-Development program prepares future leaders at First Student. 

Extensive Training 

Build skills and knowledge in such areas as safety and security, injury prevention, technology and equipment, and job efficiency. 

Diversity & Inclusion 

Because we’re stronger together, we aspire to have a culture where all people are First. We’re committed to providing an inclusive and diverse working environment for everyone every day. 

Community Service & Impact 

Go where opportunity meets community. Our customers are at the heart of everything we do. As the face of First in your community, you’ll have a positive impact on others. 

Apply today and get your career on the road with First Student!  

We aspire to have a culture where all people are First. We strive to attract and retain a diverse workforce therefore all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. First is also committed to providing a drug-free workplace. For candidates applying to positions in San Francisco or Los Angeles California, First will consider for employment qualified applicants with criminal histories consistent with the requirements of the San Francisco Fair Chance Ordinance or Los Angeles Fair Chance Ordinance. First is an equal opportunity employer and by doing so we will sustain and promote an inclusive culture that supports future growth for all.