Sr/Staff Cybersecurity Engineer (Remote - US)

be part of a team that values safety, inclusion, and excellence
we are one of the largest U.S. railroads transporting the nation's freight across 28 western states and 3 Canadian provinces. as a member of our team, you will play a role in supporting the movement of essential products and materials that help feed, clothe, supply, and power communities throughout America and the world.

bnsf | tech: innovating and transforming the future of freight rail
bnsf | tech is the technology division making BNSF the preeminent freight and mobility company in north america.

are you ready to drive change?
if you are passionate about making a difference and eager to advance your career in a dynamic and supportive environment, we want you on our team! join us in reshaping the future of freight rail and discover a fulfilling career where your contributions matter.

we are committed to a culture where all employees are included, belong, and have equal opportunity to achieve their full potential.Come make a difference with us!

learn more about BNSF and our Benefits

Job Location: Remote US
Anticipated Start Date: 07/01/2026

The US base salary range for this full-time position is provided below:

Salary Range:$165,000 - $300,000

L5: $165,000 - $220,00
L6: $225,000 - $300,000

The range represents the amount bnsf | tech reasonably expects to pay for the position based on the level, scope, and responsibilities of the role. Individual compensation and level of position offered is determined by the hiring location and additional factors including but not limited to job-related skills, experience, and relevant education or training.In addition to base pay and bonus eligibility, BNSF offers a comprehensive benefits package.

This is a full-time remote position. Employees may work from anywhere within the contiguous 48 states of the United States

Travel is up to 20%. Employees will be required to occasionally travel to our corporate headquarters in Fort Worth, TX for in person meetings. Travel expenses for business needs will be covered by BNSF

This position is open to candidates who are currently authorized to work in the United States. We are also open to sponsoring H-1B transfers, TN nonimmigrant status, and STEM OPT candidates with at least 2 years of remaining eligibility.

Apply early as this job may be removed or filled prior to the closing date, which is approximately seven (7) days after the posting date.

AI & Data Security: protect the company, our customers and employees data against cyber threats and innovate engineering solutions for a more resilient rail network.

We are seeking a highly skilled and proactive Cybersecurity Engineer to join our growing security team and lead our Data Loss Prevention (DLP) program. This role is ideal for professionals who thrive in dynamic environments and are interested in helping secure our nation's critical infrastructure. The ideal candidate will play a critical role in safeguarding our digital assets, infrastructure, and applications while contributing to the maturity of our security operations.

Key responsibilities may include:

Own the Stack: Serve as the primary engineer and administrator for our comprehensive data protection ecosystem, ensuring seamless integration across endpoints, network, and cloud perimeters.

Engineering & Threat Hunting: Write custom detection logic and queries to proactively hunt for data exfiltration risks and monitor cloud and on-prem environments.

AI Data Governance: Lead the integration of Data Loss Prevention capabilities to monitor and secure data flows for enterprise AI tools and LLMs.

Cross-Platform Integration: Architect data flows and policy enforcement between Email, Web, Messaging and other data exfiltration channels.

Program Rollout & Optimization: Drive the technical execution of the Data Loss Prevention program.

Incident Escalation: Act as the subject matter expert and top level escalation point for complex data security incidents.

Demonstrateoperational exellence by monitoring, troubleshooting, and resolving production issues, including participating in a 24/7 on-call rotation.

The duties and responsibilities in this posting are representative categories to be used in deciding whether to apply for this position. This is not an exhaustive list of the position's duties.

At BNSF Railway, we encourage individuals from all backgrounds to apply, showcasing their skills, experiences and development. We provide resources and tools to help you reach your full potential, fostering a supportive and inclusive environment.

Basic Qualifications

• Authorized to work in the US
• Minimum 5 years of experience in data loss prevention, incident response or related roles.

Preferred Qualifications

• Bachelor's degree or higher in computer science, cybersecurity, or related field.
• Proficiency in Python or Java for automation, scripting, and tool development.
• Hands-on experience with Data Loss Prevention and Incident Response solutions (e.g. zScaler, Microsoft Purview, Symantec DLP, Splunk, etc.)
• Strong understanding of modern enterprise data flows and technology landscape.
• Knowledge of data security principles including encryption, DLP, and access controls
• Proven ability to integrate disparate security tools into comprehensive solutions (e.g. automatically correlating events across several DLP solutions or setting up synchronized policies across a portfolio of tools).
• Experience or strong foundational understanding of how to secure data interactions with Generative AI applications and prompt-base systems.
• Experience leading comprehensive technical programs.
• Ability to translate highly technical data-flow concepts into clear risk assessments for business units and executive leadership.
• Ability to work independently and collaboratively in cross-functional teams.
• Passion for continuous learning and staying ahead of the threat landscape.
• Able to work now and in the future without BNSF's assistance (whether monetary, through sponsorship, or otherwise) in obtaining, maintaining, or extending employment authorization (including H-1B, STEM OPT/CPT, or TN nonimmigrant status).

At BNSF, you will have access to a comprehensive and competitive benefits package including:

• An industry-leading 401(k) and renowned Railroad Retirement program.
• A range of robust health care options for you and your dependents (including domestic partners), including medical, dental, vision, telemedicine, mental health, cancer support, and high-quality care network options.
• Health care spending accounts (HSA) with employer contributions, as well as life and disability insurance, provided at no cost.
• Family benefits including parental, pediatric and family building support, adoption and surrogacy reimbursement, and dependent care spending account (with employer match).
• Access to discounts on travel, gym memberships, counseling services and wellness support.
• Annual bonus (Incentive Compensation Program)
• Generous leave / time off policies.
• For more information, visit Benefits.

Please be aware of potential fraud that can occur when searching for new career opportunities. Please review our FAQ for more information and awareness.

All positions require pre-employment background verification.

BNSF Railway is an Equal Opportunity Employer, all qualified applicants receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

SF:MO|[[mfield5|bnsf tech|REMOTE,US|76131