Cybersecurity Operations Engineer

The CompanyServing the People Who Serve the PeopleGranicus is driven by the excitement of building, implementing, and maintaining technology that is transforming the Govtech industry by bringing governments and its constituents together. We are on a mission to support our customers with meeting the needs of their communities and implementing our technology in ways that are equitable and inclusive. Granicus has consistently appeared on the GovTech 100 list over the past 5 years and has been recognized as the best companies to work on BuiltIn.Over the last 25 years, we have served 5,500 federal, state, and local government agencies and more than 300 million citizen subscribers power an unmatched Subscriber Network that use our digital solutions to make the world a better place. With comprehensive cloud-based solutions for communications, government website design, meeting and agenda management software, records management, and digital services, Granicus empowers stronger relationships between government and residents across the U.S., U.K., Australia, New Zealand, and Canada. By simplifying interactions with residents, while disseminating critical information, Granicus brings governments closer to the people they serve—driving meaningful change for communities around the globe.Want to know more? See more of what we do here.Job SummaryGranicus is seeking a Cybersecurity Operations Engineer to operate, monitor, and continuously improve the cybersecurity controls protecting a mission-critical SaaS product.Granicus provides purpose-built cloud technology and services that help government organizations deliver more accessible, effective, and trusted digital experiences for the communities they serve.As a global organization, Granicus supports customers and operations across North America, the United Kingdom, Europe, Australia, and New Zealand, delivering cloud platforms that power critical digital services for government agencies and public sector organizations worldwide.The Cybersecurity Operations Engineer will be one of two hands-on individual contributors responsible for preserving the confidentiality, integrity, and availability of a Granicus SaaS product hosted in Amazon Web Services (AWS) and subject to FedRAMP and Criminal Justice Information Services (CJIS) security requirements. The role will operate endpoint protection, centralized security logging and analytics, vulnerability management, and related cloud security controls; monitor the environment; triage and investigate security events; support incident response; execute operational activities for the Granicus data protection program; and contribute to other cybersecurity initiatives. The position reports to the Cybersecurity Operations Lead within the Global Cyber Defense organization led by the Senior Director, Global Cyber Defense. This role must be based in the United States and must possess or be able to obtain and maintain the personnel screening and access authorization required for CJIS-regulated environments.What Your Impact Will Look LikeEssential Function Regulated SaaS Security Operations Perform day-to-day security operations and security engineering for the designated SaaS product and its supporting AWS environment. Execute security controls and operating procedures that preserve the confidentiality, integrity, and availability of the product and its data. Apply FedRAMP, NIST SP 800-53, the CJIS Security Policy, and Granicus security requirements in daily operational and technical activities. Complete assigned continuous monitoring, control testing, audit evidence, corrective action, and authorization maintenance activities in partnership with Governance, Risk, and Compliance, Product, Cloud Engineering, Site Reliability Engineering, and system owners. Identify control gaps, configuration deviations, and emerging technical risk; resolve issues within assigned authority and promptly escalate material concerns. Security Platform and Control Operations Operate and maintain endpoint detection and response, centralized security logging and analytics, vulnerability scanning and management, and related cloud security capabilities supporting the product. Verify that in-scope assets are inventoried and monitored, security telemetry is collected and retained, agents and sensors remain healthy, and coverage gaps are corrected. Onboard and maintain security log sources, including parsing, normalization, enrichment, alert routing, retention, access, and data quality. Execute vulnerability scans, validate findings, prioritize risk using exploitability and asset context, coordinate remediation, track exceptions, and verify corrective actions. Build and maintain dashboards and operational reporting for asset coverage, control health, vulnerability exposure, alert trends, response performance, compliance posture, and residual risk. Maintain integrations between security capabilities and cloud, engineering, service management, and collaboration system