Principal IT Cybersecurity Engineer

Principal IT Cybersecurity Engineer

Department: IT | Location: Can be based out of any US Location (Alachua, FL, Eden Prairie, MN, or West Lafayette, IN, or Remote)

Base Salary: $160,000 - $175,000

Bonus Potential: $20,000

Evergen is a global industry-leading contract development and manufacturing organization (CDMO) in regenerative medicine. As the only regenerative medicine company that offers a differentiated portfolio of allograft and xenograft biomaterials at scale, Evergen is headquartered in Alachua, FL, and has manufacturing facilities in West Lafayette, IN; Eden Prairie and Glencoe, MN; Neunkirchen, Germany; Glasgow, UK; and Marton, New Zealand.

We are proud to be Great Place to Work® Certified in 2026, reflecting our commitment to creating an exceptional employee experience and workplace culture. Evergen currently has full-time career opportunities available across multiple locations.

Our comprehensive benefits package includes:

• Paid Time Off (PTO)
• 401(k) with up to a 6% company match
• Holiday pay
• Medical, dental, and vision insurance
• Short-term and long-term disability coverage
• Paid parental leave and much more!

Read more about this change and Evergen’s commitment to advancing regenerative medicine here: https://www.linkedin.com/company/evergenbio

RESPONSIBILITIES:

• Design and maintain enterprise security architecture, technical standards, and reference patterns across on-premises, cloud, endpoint, network, identity, and application environments.
• Lead the technical design, implementation, integration, and optimization of cybersecurity platforms and controls.
• Evaluate new technologies and major system changes for security risk, control requirements, and alignment with enterprise architecture.
• Embed security requirements into infrastructure, application, ERP, manufacturing systems, and digital transformation initiatives.
• Design and improve security monitoring, alerting, threat detection, threat hunting, and response capabilities across the enterprise.
• Lead technical investigation, containment, recovery, and root cause analysis for complex cybersecurity incidents.
• Develop and maintain incident response playbooks, technical procedures, escalation paths, and lessons learned actions.
• Lead enterprise vulnerability and exposure management across servers, endpoints, network devices, cloud services, applications, and other technology assets.
• Prioritize and coordinate remediation based on business criticality, exploitability, threat intelligence, regulatory impact, and compensating controls.
• Coordinate penetration testing, security assessments, secure configuration reviews, and validation of remediation activities.
• Provide technical leadership for identity and access management, privileged access, multifactor authentication, conditional access, and access governance controls.
• Engineer and optimize endpoint protection, email security, network security, cloud security, data protection, segmentation, encryption, logging, and secure remote access capabilities.
• Define security baselines and hardening standards and review exceptions to determine appropriate compensating controls.
• Translate cybersecurity frameworks, company policies, and regulatory requirements into practical technical controls and security requirements.
• Provide technical evidence and subject matter expertise for audits, customer assessments, risk reviews, regulatory activities, and third-party evaluations.
• Develop scripts, workflows, integrations, dashboards, and repeatable processes that automate security monitoring, investigation, response, reporting, and control validation.
• Establish and monitor meaningful technical metrics for cybersecurity risk, control health, vulnerabilities, incidents, and remediation progress.
• Lead complex cybersecurity projects and provide technical oversight for work performed by vendors and service providers.
• Serve as a trusted cybersecurity advisor and facilitate technical design reviews, risk discussions, and decisions for high-impact initiatives.
• Mentor engineers, administrators, and analysts and communicate complex cybersecurity risks and recommendations clearly to technical and non-technical audiences.

Requirements:

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; or equivalent combination of education and experience.

Experience

• Minimum 8 years of progressive cybersecurity or information security experience, including advanced security engineering responsibilities and the design and implementation of enterprise security architecture and technical controls in a complex, multi-site environment.
• Hands-on experience across security monitoring, detection and response, vulnerability management, identity security, endpoint security, network security, cloud security, and technical response to complex cybersecurity incidents.
• Experience evaluating technology risk and supporting audits, risk assessments, and compliance activities in a regulated environment; experience in manufacturing, healthcare, medical device, life sciences, or another regulated industry preferred.

Certifications

• Preferred: CISSP, CCSP, GIAC, Microsoft Security, AWS Security, or other advanced cybersecurity certification.
• Additional certifications in incident response, cloud security, penetration testing, identity, network security, or risk management are beneficial.

Skills

• Deep technical knowledge of cybersecurity architecture, defense-in-depth, and Zero Trust principles.
• Strong expertise in threat detection, incident response, vulnerability management, and security operations.
• Experience securing cloud, network, endpoint, identity, and enterprise application environments.
• Ability to analyze complex technical risks and develop practical, scalable security solutions.
• Strong troubleshooting, investigation, and root cause analysis capabilities.
• Ability to lead through technical influence and collaborate effectively across cross-functional teams.
• Excellent written and verbal communication skills, including the ability to communicate cybersecurity risk to technical and business audiences.
• Strong project leadership, organizational, and continuous improvement skills.

Travel

• Occasional travel between Evergen locations may be required.

Physical Requirement

• Move or lift objects up to 25 pounds
• Frequent (>75%) stationary position (standing or sitting) while utilizing digital displays
• Frequent (>75%) fine manipulation using hands and fingers (typing, opening, writing, clicking, paper sorting, etc.)

Working Environment

• Onsite: Office environment with assigned workstation
• Remote positions only: Home office environment with minimum distractions

More about Evergen:

Evergen provides customers across a diverse set of market segments with leading-edge expertise, scale, and flexibility across end-to-end services including design, development, regulatory support, verification and validation, manufacturing, and supply chain management.

Evergen is rooted in a steadfast commitment to quality, integrity, and patient safety with a focus on five key values:

• Accountable: We own our actions and decisions.
• Agile: We embrace change to stay ahead of the curve and evolve to drive innovation and growth.
• Growth Mindset: We embrace challenges as opportunities for continuous learning.
• Customer-Centric: We prioritize customers at every touch point.
• Inclusive: We thrive on the richness of our diversity and ensure every voice is heard, respected, and celebrated.

At Evergen, we are committed to fostering an inclusive workplace where we embrace the richness of our diversity and ensure that every voice is heard, respected, and celebrated. We believe that by embracing diversity and promoting inclusivity, we not only uphold our values but also strengthen our position as the CDMO of Choice in regenerative medicine solutions. We recognize that cultivating a growth mindset is essential to our success, and we are dedicated to continuous learning and improvement in our diversity, equity, and inclusion efforts. Through accountability and action, we strive to create an environment where individuals can thrive, innovate, and contribute their unique perspectives to drive our collective success.

Montagu Private Equity (“Montagu”), a leading European private equity firm, acquired RTI in 2020 and has supported the transformation of the company to its next level of potential.