Cybersecurity Engineer

MESO SCALE DIAGNOSTICS; Rockville (MD); Híbrido; USD 78.000 - 116.000; Jornada completa

Descripción de la vacante

MESO SCALE DIAGNOSTICS is seeking a cybersecurity professional to strengthen our security posture. You will operate and tune core security tooling, drive vulnerability remediation with IT and engineering, and support security monitoring and incident response.

The role emphasizes hands-on engineering, data-driven metrics, and staying current with industry trends; occasional telework is available in a hybrid office environment in Rockville, MD.

Formación

• Bachelor's degree in Cybersecurity, MIS, computer science, or related field with a concentration in cybersecurity, or an equivalent combination of education and relevant experience.
• Minimum of three years of relevant work experience in cybersecurity, with hands-on experience administering security tooling.
• Life sciences experience is a plus.
• Industry certification such as GCIH, GCIA, OSCP, Security+, or similar is a plus.

Responsabilidades

• Analyze, investigate, respond to, and recover from cybersecurity incidents, events, and threats in accordance with the incident response lifecycle.
• Configure and maintain the enterprise vulnerability management platform, including scan coverage, credentialed scanning, and reporting.
• Analyze and prioritize identified vulnerabilities based on risk, exploitability, and business context, and define the remediation queue.
• Partner with IT and engineering teams to identify remediation options or compensating workarounds, track remediation to closure.
• Engineer security solutions to mitigate risk and improve the security posture of MSD.
• Configure, tune, and operate the SIEM platform, including log source onboarding, correlation and alerting logic, and alert triage.
• Support email security operations and phishing triage, including analysis of reported messages and follow-up containment actions.
• Evaluate and select assessment tools and other cybersecurity technologies to enhance security solutions.
• Understand IT security infrastructure and business requirements; investigate and mitigate security concerns and IT risks as needed.
• Stay abreast of industry updates via conferences, training and events.
• Drive continuous improvement of security posture and provide hands-on cybersecurity support to address issues.
• Collect, report and continually enhance security metrics.

Conocimientos

Vulnerability management

Security monitoring

Incident response

SIEM

Cloud security

Linux administration

Windows administration

Python scripting

Network security

Automation

Educación

Bachelor's degree in Cybersecurity, MIS, computer science, or related field

Herramientas

SIEM platforms

Vulnerability scanners

Descripción del empleo

POSITION SUMMARY:

This position is a member of the cybersecurity team responsible for improving the cybersecurity posture across the organization. The incumbent operates and tunes MSD's core security tooling, prioritizes and drives vulnerability remediation in partnership with IT and engineering teams, and provides hands-on support to security monitoring and incident response activities. The incumbent in this position is responsible for maintaining knowledge of current trends in the industry.

DUTIES AND RESPONSIBILITIES:

• Analyze, investigate, respond to, and recover from cybersecurity incidents, events, and threats in accordance with the incident response lifecycle.
• Configure and maintain the enterprise vulnerability management platform, including scan coverage, credentialed scanning, and reporting.
• Analyze and prioritize identified vulnerabilities based on risk, exploitability, and business context, and define the remediation queue.
• Partner with IT and engineering teams to identify remediation options or compensating workarounds, track remediation to closure, and guide teams on preventative measures.
• Engineer security solutions to mitigate risk and improve the security posture of MSD.
• Configure, tune, and operate the security information and event management (SIEM) platform, including log source onboarding, correlation and alerting logic, and alert triage.
• Support email security operations and phishing triage, including analysis of reported messages and follow-up containment actions.
• Evaluate and select assessment tools and other cybersecurity technologies to enhance security solutions.
• Understand IT security infrastructure and business requirements. Work with team to investigate and mitigate security concerns and IT risks as needed.
• Evaluate and assess different security technologies to appropriately expand MSD's cybersecurity portfolio.
• Stay abreast of relevant industry updates and changes via conferences, training and events.
• Drive continuous improvement of security posture and provide hands-on cybersecurity support to address cybersecurity issues as needed.
• Collect, report and continually enhance security metrics.

EXPERIENCE AND QUALIFICATIONS:

• Bachelor's degree in Cybersecurity, MIS, computer science, or related field with a concentration in cybersecurity, or an equivalent combination of education and relevant experience.
• Minimum of three years of relevant work experience in cybersecurity, with hands-on experience administering security tooling. Preference for vulnerability management, security monitoring, incident response, or solution engineering.
• Life sciences experience is a plus.
• Industry certification such as GCIH, GCIA, OSCP, Security+, or a similar industry recognized certification is a plus.

KNOWLEDGE, SKILLS AND ABILITIES:

• Knowledge of network based, system level, and application layer attacks and mitigation methods
• Working knowledge of Microsoft Windows and Linux platform administration.
• Basic working knowledge of Amazon Web Services (AWS) and core cloud security concepts.
• Microsoft Office 365 security administration experience is a plus.
• Hands-on experience configuring and operating vulnerability management and SIEM platforms, including scan configuration, log source onboarding, and alert tuning.
• Knowledge of security topics including network and application security, infrastructure hardening, security baselines, web server, and database security, security testing; security integration and governance; malware analysis; incident response; cloud security or risk and compliance.
• Familiarity with security standards, access controls, and compliance requirements based on industry standards.
• Basic understanding of data security (classification, encryption, DLP) is a plus.
• Working knowledge of secure network design, including network segmentation and traffic filtering between internal segments.
• Ability to create, maintain, and report metrics that measure the effectiveness of security controls.
• Scripting and automation skills in Bash, Python, PowerShell, or similar is a plus.
• Solutions-oriented with an aptitude for solving problems and acting on own initiative.
• Highly motivated with a willingness to learn new technologies and be a hands-on engineer.
• Effective communicator with a positive and confident attitude.
• Ability to work both independently and as an effective team member.
• Demonstrated propensity to be creative, collaborative, proactive, and self-motivated in the execution and completion of assigned accountabilities.

PHYSICAL DEMANDS:

While performing the duties of this job, the individual is frequently required to sit and stand for long periods. The individual is occasionally required to walk; use hands and fingers to operate, handle, or feel objects, tools, or controls; reach with hands and arms.

WORK ENVIRONMENT:

This position is performed in a traditional office environment with an option for telework. Occasional local travel among offices as needed.

COMPENSATION SUMMARY

The annual base salary for this position ranges from $78,100 to $116,200. This salary range represents a general guideline as MSD considers other factors when presenting an offer of employment, such as scope and responsibilities of the position, external market factors, and the candidate’s knowledge, skills, abilities, education and experience. Employees may qualify for a discretionary or non-discretionary bonus in addition to their base salary. These annual bonuses are intended to recognize individual performance and enable employees to benefit from the Company's overall success.

BENEFITS SUMMARY

At MSD, we offer a comprehensive benefits package to support our employees' well-being and financial security. In addition to competitive salaries, our benefits include medical, dental, and vision coverage, along with prescription benefits. We provide a 401(k) plan with company matching, flexible spending accounts, and company-paid short- and long-term disability insurance as well as group life and accidental death and dismemberment insurance. Our offerings also encompass paid vacation, paid sick leave, paid holidays, and paid parental leave, along with an employee assistance program. Additional voluntary perks include a fitness club membership contribution, pet insurance, identity theft protection, home and auto insurance discounts, and optional supplemental life insurance.

EEO/AA STATEMENT

MSD is an Equal Opportunity/Affirmative Action Employer. We are committed to fostering a diverse and inclusive workplace where all individuals are treated with respect and dignity. We welcome applications from all qualified candidates, making employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, genetic information, marital status, national origin, age, protected veteran status, pregnancy, disability status, or any other protected characteristic. For our full EEO/AA and Pay Transparency statement, please visit here. Meso Scale Diagnostics uses E-Verify to validate the work eligibility of candidates.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.