Cybersecurity Engineer, Principal

About the role

Hut 8 brings exceptional people together to solve the world's most consequential problems at the intersection of energy and technology. Today, that means building infrastructure for AI at a pace and scale without precedent. Tomorrow, it could mean powering a new era of innovation through robotics, advanced manufacturing, or an industry that does not yet exist. Whatever the technology demands, our ambition holds: to build the defining physical infrastructure company of our generation.

We look for thinkers and builders with the rigor, humility, and ownership to solve problems at this scale. They start from zero and choose truth over tradition. They back the best idea, whatever its source. They bet on themselves and embrace the hard truths that force them to grow. Our commitment is to keep the path from idea to execution short, trust them with critical decisions and the work that follows, and surround them with colleagues whose curiosity extends beyond their expertise.

About the Role

Hut 8 is seeking a Cybersecurity Engineer to operate and continuously improve the controls that protect the company's technology environment. This role is hands-on and operations-oriented, with day-to-day responsibility across security tooling, identity, endpoint, network, cloud, vulnerability management, monitoring, and incident response.

The Cybersecurity Engineer is the day-to-day operator of the security capabilities designed and built by the Cybersecurity Architect. The role works closely with the Cybersecurity Architect, Technology Operations, Networking, Software, Data Engineering, Applied AI, Mining Operations, and external security partners to monitor, maintain, troubleshoot, and improve security operations.

This role reports to the Cybersecurity Partner, with close alignment to the Cybersecurity Architect and broader Technology organization.

What You'll Do

• Operate, maintain, and improve security controls across corporate IT, cloud, SaaS, data center, mining, and AI/compute environments.
• Configure, administer, and improve security technologies such as SIEM, EDR, vulnerability management, identity and access management, firewalls, email security, cloud security, and security monitoring platforms.
• Monitor security events, investigate alerts, support triage, and escalate potential incidents in accordance with documented procedures.
• Support incident response activities, including evidence collection, containment, eradication, recovery, root-cause analysis, and post-incident remediation.
• Manage vulnerability scanning, asset coverage, prioritization, remediation tracking, exception handling, and validation of fixes.
• Support identity and access controls, including MFA, SSO, joiner-mover-leaver workflows, privileged access, access reviews, service-account governance, and least-privilege improvements.
• Implement and maintain endpoint, network, cloud, and application security configurations in partnership with technology owners.
• Help secure APIs, integrations, CI/CD pipelines, production systems, and data platforms by applying approved security patterns and control requirements.
• Develop and maintain security automation, scripts, integrations, dashboards, and workflows that improve coverage, consistency, and response time.
• Participate in security architecture reviews, technical assessments, threat modeling, and control-validation exercises.
• Maintain accurate security documentation, asset information, diagrams, runbooks, operating procedures, and technical records.
• Support audit and compliance activities by gathering evidence, validating control operation, and helping remediate identified gaps.
• Work with vendors and managed security providers to troubleshoot issues, validate service performance, and deliver agreed improvements.
• Contribute to security testing, phishing exercises, configuration reviews, and other activities that improve organizational resilience.
• Stay current on relevant threats, vulnerabilities, defensive techniques, and changes to the company's technology environment

About You

• 3+ years of experience in cybersecurity, security engineering, systems administration, network engineering, cloud engineering, or a related technical role.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field; equivalent practical experience will be considered.
• Hands-on experience with security monitoring, SIEM, EDR, vulnerability management, identity and access management, endpoint security, firewalls, or cloud security tools.
• Working knowledge of networking, operating systems, authentication, authorization, encryption, logging, and common attack techniques.
• Experience investigating security alerts or incidents and documenting findings, actions, and follow-up remediation.
• Experience with at least one major cloud platform and familiarity with SaaS security and enterprise identity services.
• Ability to automate routine work using scripting or programming languages such as Python, PowerShell, Bash, or similar.
• Familiarity with security frameworks and control environments, including NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards.
• Strong troubleshooting, documentation, and communication skills, with the ability to work effectively with technical and non-technical stakeholders.
• Ability to prioritize work based on risk, business impact, and operational urgency.
• Relevant certifications such as Security+, CySA+, GSEC, GIAC, cloud security certifications, or vendor certifications are preferred.
• Practical, curious, and collaborative, with a willingness to take ownership and improve processes rather than simply operate them.