Cybersecurity Specialist

About This Role

This hands-on role supports the day-to-day security operations that keep the company's environment secure as it scales, helping to protect sensitive technology, systems, and data. The specialist will monitor and investigate security alerts, manage vulnerabilities, align systems to security standards, and support incident response, identity and access, data governance, and security compliance. The role suits a curious, detail-oriented individual excited to grow their security expertise in a fast-moving startup environment.

Responsibilities

• Run day-to-day security monitoring, including triaging, investigating, resolving, and escalating findings from endpoint detection and response (EDR) tooling and security alerts
• Drive vulnerability management, supporting the full lifecycle from scanning and prioritization through remediation tracking, verification, and reporting, partnering with teams across REGENT to get issues resolved
• Execute incident response, carrying out detection, containment, eradication, and recovery procedures in coordination with the Director, IT & Infrastructure, escalating higher-severity or ambiguous incidents as needed
• Keep systems hardened by maintaining configuration baselines, hardened builds, authorized software and service tracking, and drift monitoring against approved standards, and help drive findings through remediation and verification
• Support identity and access by helping administer the identity and access management environment, supporting joiner/mover/leaver workflows and automated provisioning, and assisting with privileged access and routine access reviews
• Support data governance and resilience by helping apply data classification, data loss prevention (DLP), and retention controls; coordinating with Facilities where physical security systems intersect with company systems; and supporting backup, disaster recovery, and business continuity testing
• Improve security as the company scales by looking for opportunities to strengthen processes, automate repetitive work, improve documentation, and make day-to-day security operations more effective
• Keep documentation audit-ready by maintaining accurate records of security procedures, incidents, configuration baselines, and exceptions, and contributing to runbooks, SOPs, and GRC evidence
• Help the whole company stay secure by supporting the security awareness and training program, including phishing simulations, and helping reinforce good security practices across REGENT

Requirements

• Endpoint detection and response (EDR) experience, including triaging and investigating endpoint security alerts, taking appropriate action within established procedures, and recognizing when something needs to be escalated
• Vulnerability management experience, understanding the vulnerability lifecycle, including scanning, prioritization, remediation tracking, verification, and reporting
• Incident response fundamentals, with working knowledge of detection, containment, eradication, and recovery and the ability to execute established procedures while partnering with senior team members on higher-severity events
• System hardening and configuration management experience, understanding security baselines and able to support configuration management, drift detection, and remediation
• Identity and access fundamentals, comfortable supporting routine access reviews, joiner/mover/leaver workflows, and day-to-day identity administration
• Strong security documentation habits, producing clear, accurate procedures, incident records, configuration baselines, and security evidence, with the attention to detail needed in a regulated environment
• A proactive, ownership-oriented approach, following work through to completion, surfacing risks and blockers early, asking questions when something doesn't look right, and looking for ways to improve how the work gets done

Nice to have:

• Regulated-environment exposure, such as CMMC, NIST SP 800-171, aerospace, defense, or manufacturing
• Broader technical exposure, including experience with identity providers (IdPs) and conditional access, data classification and DLP tooling, networking fundamentals such as VLANs, RADIUS/802.1X, and basic firewall concepts, or scripting and automation for security monitoring and reporting

Benefits

• Competitive compensation, including a robust equity incentive plan
• Comprehensive health, dental, and vision insurance, with 100% of premiums covered
• 401(k) with company matching
• Generous flexible time off, paid parental leave, and company-wide holiday breaks
• Relocation packages available
• Daily free catered lunches
• Learning and professional development opportunities

About the Company

REGENT is on a mission to revolutionize regional transportation between coastal cities by creating Seagliders, groundbreaking wing-in-ground-effect craft that travel just above the water's surface. These vehicles combine the speed of an airplane with the low operating costs of a boat, capable of 180 miles at 180 mph on today's battery technology. The company is scaling from a breakthrough prototype to full production, backed by leading investors.