Cybersecurity Engineer

STERIS Corporation•Mentor, OH

3d•$70,250 - $75,000•Hybrid

About The Position

Join the Information and Technology team at STERIS as a Cybersecurity Engineer. You will be responsible for supporting the protection of STERIS systems, infrastructure, applications, data, and related technology assets through the implementation, operation, and continuous improvement of cybersecurity controls. You will assist with vulnerability management, security monitoring, incident response, third-party risk management, policy and standards support, audit evidence collection, and the evaluation of emerging threats and technologies. Working independently and collaboratively with IT, business, vendor, Legal, Procurement, and other stakeholders. As a Cybersecurity Engineer you will also identify risks, investigate security events, coordinate remediation activities, and strengthen the organization’s global cybersecurity posture. This position is located in Mentor, Ohio with the opportunity for a hybrid schedule. Preference will be given to qualified candidates currently living within commuting distance of Mentor.

Requirements

Bachelors degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity or related technical degree. Internship experience highly preferred.
OR Associates degree with 4+ years in the following:
OR High School Diploma with 8+ years experience in the following:
Administrating and implementing security solutions containing at least three of the following enterprise infrastructure technologies: compute, data center, operating systems, database, networking, security tools/cyber, automation, cloud, and engineering applications for on premise and off premise deployment.
Experience in the specific technology domain, with experience in requirements definition, solutioning, configuring, testing, or operationalization.
Experience in implementing orchestration\automation to isolate systems that pose risk to the organization.
Knowledge of industry security policies.
Experience within infrastructure security technologies, multifactor authentication, data, and vulnerability scanning technologies.
Demonstrated analytical, problem solving and technical skills.
Demonstrated interpersonal and communication skills.

Nice To Haves

Experience in a global/multi-national organization in a shared services organization.
Experience in working across large geographically distributed and diverse teams, matrixed into a larger overall IT organization.
Advanced vendor certification in an applicable technology domain.
Six Sigma or LeanIT

Responsibilities

Participate in security incident response activities, including triage, containment, eradication, recovery, documentation, and post-incident lessons learned.
Review infrastructure, cloud, application, and business technology changes to identify security risks and recommend appropriate controls.
Assess and support security controls for cloud platforms, SaaS applications, and externally hosted services.
Develop, tune, and improve detection rules, alert logic, use cases, and security monitoring capabilities to reduce false positives and improve response effectiveness.
Partner with IT, infrastructure, application, and business teams to track remediation of identified vulnerabilities, control gaps, and audit findings.
Support the cybersecurity third-party risk management program by assisting with vendor security assessments, reviewing cybersecurity questionnaires and supporting evidence, identifying control gaps, documenting risks, and coordinating remediation activities with business owners, vendors, Legal, Procurement, and IT stakeholders.
Contribute to cybersecurity standards, procedures, guidelines, and technical baselines aligned with company security requirements.
Provide technical evidence and clarification for internal audits, external audits, regulatory reviews, and Customer security inquiries.
Provide technical cybersecurity guidance to IT and business stakeholders and support security awareness efforts where needed, including technical tabletop exercises.
Maintain accurate documentation for supported security tools, processes, runbooks, configurations, and escalation procedures.
Monitor emerging threats, vulnerabilities, and cybersecurity technologies; recommend improvements to strengthen the company’s security posture.
Participate in after-hours response or escalation support for urgent cybersecurity events, as required.