Cybersecurity Engineer

MESO SCALE DIAGNOSTICS, LLC.•Rockville, MD

6d•$78,100 - $116,200•Hybrid

About The Position

This position is a member of the cybersecurity team responsible for improving the cybersecurity posture across the organization. The incumbent operates and tunes MSD’s core security tooling, prioritizes and drives vulnerability remediation in partnership with IT and engineering teams, and provides hands-on support to security monitoring and incident response activities. The incumbent is responsible for maintaining knowledge of current industry trends. The role involves incident response, vulnerability management, security monitoring and SIEM operations, email security support, security solution engineering, technology evaluation, and continuous improvement of security posture. It also includes collecting and enhancing security metrics and collaborating with IT and engineering teams to address security concerns and IT risks. The position is performed in a traditional office environment with an option for telework. Occasional local travel among offices may be needed.

Requirements

Bachelor's degree in Cybersecurity, MIS, computer science, or a related field with a concentration in cybersecurity, or an equivalent combination of education and relevant experience.
Minimum of three years of relevant cybersecurity work experience, including hands-on experience administering security tooling.
Knowledge of network-based, system-level, and application-layer attacks and mitigation methods.
Working knowledge of Microsoft Windows and Linux platform administration.
Basic working knowledge of Amazon Web Services (AWS) and core cloud security concepts.
Hands-on experience configuring and operating vulnerability management and SIEM platforms, including scan configuration, log source onboarding, and alert tuning.
Knowledge of network and application security, infrastructure hardening, security baselines, web server and database security, security testing, security integration and governance, malware analysis, incident response, cloud security, or risk and compliance.
Familiarity with security standards, access controls, and compliance requirements based on industry standards.
Working knowledge of secure network design, including network segmentation and traffic filtering between internal segments.
Ability to create, maintain, and report metrics that measure the effectiveness of security controls.
Solutions-oriented problem-solving ability and aptitude for acting on own initiative.
Willingness to learn new technologies and work as a hands-on engineer.
Effective communication skills and a positive, confident attitude.
Ability to work independently and as an effective team member.
Demonstrated creativity, collaboration, proactivity, and self-motivation in executing and completing assigned accountabilities.

Nice To Haves

Life sciences experience.
Industry certification such as GCIH, GCIA, OSCP, Security+, or a similar industry-recognized certification.
Microsoft Office 365 security administration experience.
Basic understanding of data security, including classification, encryption, and DLP.
Scripting and automation skills in Bash, Python, PowerShell, or similar.
Preference for experience in vulnerability management, security monitoring, incident response, or solution engineering.

Responsibilities

Analyze, investigate, respond to, and recover from cybersecurity incidents, events, and threats in accordance with the incident response lifecycle.
Configure and maintain the enterprise vulnerability management platform, including scan coverage, credentialed scanning, and reporting.
Analyze and prioritize vulnerabilities based on risk, exploitability, and business context, and define the remediation queue.
Partner with IT and engineering teams to identify remediation options or compensating workarounds, track remediation to closure, and guide teams on preventative measures.
Engineer security solutions to mitigate risk and improve MSD’s security posture.
Configure, tune, and operate the SIEM platform, including log source onboarding, correlation and alerting logic, and alert triage.
Support email security operations and phishing triage, including analysis of reported messages and follow-up containment actions.
Evaluate and select assessment tools and other cybersecurity technologies to enhance security solutions and expand MSD’s cybersecurity portfolio.
Work with the team to investigate and mitigate security concerns and IT risks as needed.
Stay abreast of relevant industry updates and changes through conferences, training, and events.
Drive continuous improvement of security posture and provide hands-on cybersecurity support to address cybersecurity issues as needed.
Collect, report, and continually enhance security metrics.

Benefits

Medical, dental, and vision coverage, along with prescription benefits.
401(k) plan with company matching.
Flexible spending accounts.
Company-paid short- and long-term disability insurance.
Group life and accidental death and dismemberment insurance.
Paid vacation, paid sick leave, and paid holidays.
Paid parental leave.
Employee assistance program.
Fitness club membership contribution.
Pet insurance.
Identity theft protection.
Home and auto insurance discounts.
Optional supplemental life insurance.
Employees may qualify for a discretionary or non-discretionary bonus in addition to base salary.