Cybersecurity Engineer

W. R. Grace & Co.•Columbia, MD

1d•$75,808 - $104,236•Hybrid

About The Position

Grace is seeking an IT Cybersecurity Engineer to join our Global Cybersecurity Team! This role reports to Lead IT Cybersecurity Engineer located in Columbia, MD. The Cybersecurity team is seeking to hire a versatile and highly motivated IT Cybersecurity Engineer to join our global team. The ideal candidate will be a self-starter who can work collaboratively in a team environment, possess exceptional problem-solving skills, attention to detail, and refined communication skills. Reporting to the Lead IT Cybersecurity Engineer, the IT Cybersecurity Engineer will play an important role for our cybersecurity program by supporting the deployment of security solutions and enforcing security standards. As a key technical resource, the candidate will be a critical contributor to an overarching enterprise security strategy working closely with IT infrastructure to execute initiatives in alignment with the strategic cybersecurity vision. The IT Cybersecurity Engineer will play an active role in supporting the planning, implementation, and continuous delivery of security solutions across the enterprise and serve as a key resource and hands on support to help resolve issues or questions related to those solutions. The candidate will represent Grace as a technical member of the Global Cybersecurity Architecture Review Board and have an active participation in the full development lifecycle of Security Standards and Guidelines, including providing input, review and approval of architecture design patterns, enterprise security solutions and technical controls.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science or Engineering
A minimum of 2 years of combined IT and Security work experience, with a broad exposure to network infrastructures and multi-platform environments.
Strong knowledge of Operating systems (Windows, Linux), Networking Concepts (TCP/IP, firewalls, VPNs), Security tools (e.g. EDR, SIEM), and Cloud security concepts (Azure)
Experience handling security-related service requests, including troubleshooting issues and managing exception or exclusion workflows.
Experience supporting, administrating, and/or troubleshooting security solutions, including endpoint protection, and network security technologies like zero trust network controls, and firewalls.
Understanding of cybersecurity frameworks and guidelines such as those developed by NIST, CISA, CIS, CSA, ISO and MITRE ATT&CK.
Knowledge and understanding of information risk assessment concepts and principles in relation to risk appetite, risk tolerance, and business risk exposure
Excellent interpersonal skills with the ability to translate technical subjects to non-technical audiences.
Excellent problem solving, critical thinking, and analytical skills with the ability to deconstruct problems
Be creative and intellectually curious and not afraid to immerse yourself in technical documentation
Have a passion for all things security

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentials preferred but not required.

Responsibilities

Promote the adoption of new technologies, security architectures, and tools that align with established cybersecurity standards, frameworks, and architectural guidelines.
Serve as a technical resource for enterprise security solutions, including support for endpoint protection, endpoint management, privileged access management, and network security technologies like zero trust network controls and firewalls.
Support IT technical services staff to evaluate, select, install or configure hardware and software systems that provide appropriate security functions
Assist with cybersecurity architecture reviews of IT infrastructure and solutions.
Recommend the application of controls, fixes, patches, and disaster recovery procedures.
Handling of cybersecurity-related support requests, ensuring timely resolution and adherence to SLAs.