Cybersecurity Engineer

POSITION SUMMARY:

This position is a member of the cybersecurity team responsible for improving the cybersecurity posture across the organization. The incumbent operates and tunes MSD’s core security tooling, prioritizes and drives vulnerability remediation in partnership with IT and engineering teams, and provides hands-on support to security monitoring and incident response activities. The incumbent in this position is responsible for maintaining knowledge of current trends in the industry.

DUTIES AND RESPONSIBILITIES: 

• Analyze, investigate, respond to, and recover from cybersecurity incidents, events, and threats in accordance with the incident response lifecycle.

• Configure and maintain the enterprise vulnerability management platform, including scan coverage, credentialed scanning, and reporting.

• Analyze and prioritize identified vulnerabilities based on risk, exploitability, and business context, and define the remediation queue.

• Partner with IT and engineering teams to identify remediation options or compensating workarounds, track remediation to closure, and guide teams on preventative measures.

• Engineer security solutions to mitigate risk and improve the security posture of MSD.

• Configure, tune, and operate the security information and event management (SIEM) platform, including log source onboarding, correlation and alerting logic, and alert triage.

• Support email security operations and phishing triage, including analysis of reported messages and follow-up containment actions.

• Evaluate and select assessment tools and other cybersecurity technologies to enhance security solutions.

• Understand IT security infrastructure and business requirements. Work with team to investigate and mitigate security concerns and IT risks as needed.

• Evaluate and assess different security technologies to appropriately expand MSD’s cybersecurity portfolio.

• Stay abreast of relevant industry updates and changes via conferences, training and events.

• Drive continuous improvement of security posture and provide hands-on cybersecurity support to address cybersecurity issues as needed.

• Collect, report and continually enhance security metrics.

EXPERIENCE AND QUALIFICATIONS:

• Bachelor's degree in Cybersecurity, MIS, computer science, or related field with a concentration in cybersecurity, or an equivalent combination of education and relevant experience.  

• Minimum of three years of relevant work experience in cybersecurity, with hands-on experience administering security tooling. Preference for vulnerability management, security monitoring, incident response, or solution engineering.

• Life sciences experience is a plus.

• Industry certification such as GCIH, GCIA, OSCP, Security+, or a similar industry recognized certification is a plus.

KNOWLEDGE, SKILLS AND ABILITIES:

• Knowledge of network based, system level, and application layer attacks and mitigation methods

• Working knowledge of Microsoft Windows and Linux platform administration.

• Basic working knowledge of Amazon Web Services (AWS) and core cloud security concepts.

• Microsoft Office 365 security administration experience is a plus.

• Hands-on experience configuring and operating vulnerability management and SIEM platforms, including scan configuration, log source onboarding, and alert tuning.

• Knowledge of security topics including network and application security, infrastructure hardening, security baselines, web server, and database security, security testing; security integration and governance; malware analysis; incident response; cloud security or risk and compliance.

• Familiarity with security standards, access controls, and compliance requirements based on industry standards. 

• Basic understanding of data security (classification, encryption, DLP) is a plus.

• Working knowledge of secure network design, including network segmentation and traffic filtering between internal segments.

• Ability to create, maintain, and report metrics that measure the effectiveness of security controls.

• Scripting and automation skills in Bash, Python, PowerShell, or similar is a plus.

• Solutions-oriented with an aptitude for solving problems and acting on own initiative.

• Highly motivated with a willingness to learn new technologies and be a hands-on engineer.

• Effective communicator with a positive and confident attitude.

• Ability to work both independently and as an effective team member.

• Demonstrated propensity to be creative, collaborative, proactive, and self-motivated in the execution and completion of assigned accountabilities. 

PHYSICAL DEMANDS:

While performing the duties of this job, the individual is frequently required to sit and stand for long periods. The individual is occasionally required to walk; use hands and fingers to operate, handle, or feel objects, tools, or controls; reach with hands and arms. 

WORK ENVIRONMENT:

This position is performed in a traditional office environment with an option for telework.  Occasional local travel among offices as needed.

MSD is an Equal Opportunity/Affirmative Action Employer. We are committed to fostering a diverse and inclusive workplace where all individuals are treated with respect and dignity. We welcome applications from all qualified candidates, making employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, genetic information, marital status, national origin, age, protected veteran status, pregnancy, disability status, or any other protected characteristic. For our full EEO/AA and Pay Transparency statement, please visit here. Meso Scale Diagnostics uses E-Verify to validate the work eligibility of candidates.