IT Security Engineer

About the role

ABOUT THE COMPANY

America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences.

Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure.

Founded in 2024, Twenty Technologies (www.twenty.io http://www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.

Mission | On Site | Full Time | U.S. Citizenship Required / No Active Clearance Required

ROLE SUMMARY

We are seeking IT Security Engineer to join our growing technology engineering team. This is a critical role that will establish and maintain our security infrastructure, protect our digital assets, and ensure compliance with industry standards. You will be responsible for implementing comprehensive security solutions across our network, systems, and applications, while working closely with our development and operations teams to embed security into our organizational culture.

WHAT YOU'LL DO

- Design, implement, and maintain enterprise network security architecture, including firewalls, intrusion detection systems, VPNs, and DMZs.

- Develop and enforce security policies, standards and procedures across the organization.

- Conduct security assessments, vulnerability scans and penetration testing to identify and remediate security gaps.

- Monitor systems and networks 24/7 using security information and event management (SIEM) tools; investigate and respond to security incidents.

- Manage access controls, identity and access management (IAM), and multi-factor authentication (MFA) solutions.

- Establish and manage data loss prevention (DLP) and encryption protocols for sensitive data at rest and in transit.

- Perform security hardening of servers, workstations, and endpoints; manage patch management and system updates.

- Provide security awareness training and education to employees to foster a security-conscious culture.

- Conduct root cause analysis on security incidents and prepare incident response reports and recommendations.

- Ensure compliance with relevant regulations (CMMC, SOC 2, GDPR, PCI-DSS, or industry-specific standards as applicable).

MUST HAVE

- Bachelor's degree in Computer Science, Information Security, or related field (or equivalent professional experience).

- 5+ years of professional IT security experience, with demonstrated expertise in at least two of the following domains: network security, systems security, or cybersecurity.