Cybersecurity Engineer

MSD Careers•Rockville, MD

17d•$78,100 - $116,200•Hybrid

About The Position

This position is part of the cybersecurity team and helps improve the organization’s cybersecurity posture. The Cybersecurity Engineer operates and tunes core security tools, prioritizes and drives vulnerability remediation with IT and engineering teams, and provides hands-on support for security monitoring and incident response. The role also requires maintaining knowledge of current industry trends. The position involves operating and improving vulnerability management and SIEM capabilities, analyzing and responding to incidents, supporting email security and phishing triage, and engineering solutions to reduce risk. The engineer collaborates with IT and engineering teams to select remediation options, track work through closure, and promote preventative measures. The role also evaluates cybersecurity technologies, supports risk investigations, and develops security metrics. The position is performed in a traditional office environment, with an option for telework and occasional local travel among offices as needed. The stated annual base salary range is $78,100 to $116,200. Employees may also qualify for a discretionary or non-discretionary bonus.

Requirements

Bachelor’s degree in Cybersecurity, MIS, computer science, or a related field with a concentration in cybersecurity, or an equivalent combination of education and relevant experience.
At least three years of relevant cybersecurity work experience, including hands-on experience administering security tools.
Knowledge of network-based, system-level, and application-layer attacks and mitigation methods.
Working knowledge of Microsoft Windows and Linux platform administration.
Basic working knowledge of AWS and core cloud security concepts.
Hands-on experience configuring and operating vulnerability management and SIEM platforms, including scan configuration, log source onboarding, and alert tuning.
Knowledge of security topics including network and application security, infrastructure hardening, security baselines, web server and database security, security testing, security integration and governance, malware analysis, incident response, cloud security, or risk and compliance.
Familiarity with security standards, access controls, and compliance requirements based on industry standards.
Working knowledge of secure network design, including network segmentation and traffic filtering between internal segments.
Ability to create, maintain, and report metrics that measure the effectiveness of security controls.
Solutions-oriented, with problem-solving skills and the ability to take initiative.
Motivated to learn new technologies and work as a hands-on engineer.
Effective communication skills and a positive, confident attitude.
Ability to work independently and effectively as a team member.
Demonstrated creativity, collaboration, proactivity, and self-motivation in completing assigned accountabilities.

Nice To Haves

Life sciences experience.
An industry certification such as GCIH, GCIA, OSCP, Security+, or a similar recognized certification.
Preference for experience in vulnerability management, security monitoring, incident response, or security solution engineering.
Microsoft Office 365 security administration experience.
Basic understanding of data security, including classification, encryption, and DLP.
Scripting and automation skills in Bash, Python, PowerShell, or similar.

Responsibilities

Analyze, investigate, respond to, and recover from cybersecurity incidents, events, and threats according to the incident response lifecycle.
Configure and maintain the enterprise vulnerability management platform, including scan coverage, credentialed scanning, and reporting.
Analyze and prioritize vulnerabilities based on risk, exploitability, and business context, and define the remediation queue.
Partner with IT and engineering teams to identify remediation options or compensating workarounds, track remediation to closure, and guide teams on preventative measures.
Engineer security solutions to mitigate risk and improve the organization’s security posture.
Configure, tune, and operate the SIEM platform, including log source onboarding, correlation and alerting logic, and alert triage.
Support email security operations and phishing triage, including analyzing reported messages and taking follow-up containment actions.
Evaluate and select assessment tools and other cybersecurity technologies to enhance security solutions.
Understand IT security infrastructure and business requirements, and work with the team to investigate and mitigate security concerns and IT risks.
Evaluate and assess security technologies to expand the organization’s cybersecurity portfolio appropriately.
Stay informed about relevant industry updates and changes through conferences, training, and events.
Drive continuous improvement of the security posture and provide hands-on cybersecurity support as needed.
Collect, report, and continually enhance security metrics.