Security Engineer

Cisco•Maynard, MA

1d•$116,600 - $147,900

About The Position

As a Security Engineer on the Acacia IT Operations team, you will drive day-to-day security operations (focusing on identity security, vulnerability management, and endpoint protection) to ensure a resilient security posture for our global operations. You will manage the vulnerability lifecycle and triage security alerts to mitigate threats in real-time. By partnering with Infrastructure and Network teams, you will enhance Privileged Access Management (PAM) processes to protect our sensitive data. You will also develop and refine security runbooks and operational procedures to ensure consistent, repeatable security standards across all sites. This role is critical in safeguarding our the technology at the forefront of our business, ensuring that our security measures evolve alongside our rapid business growth.

Requirements

Bachelors degree and 5 years of professional experience in security operations, infrastructure security, or identity management.
Management of the end-to-end vulnerability lifecycle, including scanning, tracking, and verifying remediation.
Administration of Active Directory environments, including the management of group policies and access control hygiene.
Triage and response to security incidents using SIEM, EDR, or similar monitoring platforms.
Creation and maintenance of technical security runbooks or operational procedures.

Nice To Haves

Use endpoint security platforms (e.g., CrowdStrike, SentinelOne) to monitor, harden, and maintain the security health of servers and workstations.
Implement vulnerability management campaigns using tools like Tenable or Rapid7 to track, report, and drive remediation progress across cross-functional teams.
Implement and manage DNS security strategies using platforms like Cisco Umbrella or Zscaler to mitigate network-level threats.
Analyze logs and security events within platforms like Splunk to identify, triage, and escalate potential security incidents effectively.
Apply data classification and Data Loss Prevention (DLP) strategies to identify and protect critical information across enterprise environments.

Responsibilities

Drive day-to-day security operations focusing on identity security, vulnerability management, and endpoint protection.
Manage the vulnerability lifecycle and triage security alerts to mitigate threats in real-time.
Enhance Privileged Access Management (PAM) processes by partnering with Infrastructure and Network teams.
Develop and refine security runbooks and operational procedures.
Ensure consistent, repeatable security standards across all sites.