Cybersecurity Engineer (On-Site)

Middlesex Savings Bank; Westborough (MA); On-site; USD 76,000 - 136,000; Full time

Job summary

Middlesex Savings Bank is seeking a cybersecurity engineer who will architect, build, and maintain secure environments and applications to protect networks and data. The role emphasizes threat detection, incident response, and strengthening the bank's security posture.

The position starts on-site in Massachusetts for 90 days, then shifts to hybrid or remote. Responsibilities include monitoring SIEM, conducting vulnerability assessments, managing security applications, and coordinating with

Qualifications

• Bachelor's Degree in computer science, information systems or equivalent work experience.
• 5+ years experience supporting security components in enterprise infrastructure.
• Experience with Windows and Linux security control administration.
• Familiarity with CIS Top 18 Controls or similar security frameworks.

Responsibilities

• Monitor security alerts and dashboards (SIEM, vulnerability management) for suspicious activity.
• Triage and respond to security incidents; escalate when necessary.
• Perform vulnerability assessments and prioritize risk across network and applications.
• Conduct regular security audits and penetration testing to identify potential risks.
• Manage server assets and ensure backups and security controls are in place.
• Oversee change management for security-related changes.

Skills

IT security controls

Cybersecurity protocols

Analytical thinking

Documentation skills

Education

Bachelor's Degree in computer science, information systems or equivalent work experience

Tools

Windows OS

Linux OS

IDS/IPS

Firewall management

Job description

The cybersecurity engineer has a dual role in the Bank: a responsibility for architecting, building, and maintaining secure environments and applications that are designed to protect the Bank's networks, data and digital assets from risk. In addition, a responsibility for monitoring, detecting, and responding to security related risks. Their primary focus is strengthening defenses, identifying vulnerabilities and weaknesses, responding to threats, and implementing measures to continually strengthen the Banks security posture. ** Please note: New hires work on-site in the Massachusetts office for 90 days before transitioning to a hybrid or remote schedule. **

Responsibilities

• Threat Hunting, Monitoring, Detection, and Response:
• Monitor security alerts and dashboards (SIEM, Vulnerability Management, , etc.) for suspicious activity.
  • Triage and respond to security incidents. Escalate to senior analysts or the incident response team when necessary.
  • Investigate and document security observations/incidents, ensuring resolution.
  • Analyze logs, network traffic, and endpoint activity for signs for malicious behavior.
  • Perform regular vulnerability assessments and prioritize risk within the network, system, and applications.
• Create formal incidents and support the investigation of such incidents.
• Conduct Security Assessments: Perform regular security audits, vulnerability assessments, and penetration testing to identify and mitigate potential risks.
• Correlate telemetry data from security systems to identity cyber threats, risk patterns, and control weaknesses.
• System & Security Application Administration:
• Implementation, secure configuration, and ongoing management of the Bank’s security environments and applications. Examples of systems/functions a Cyber Security Engineer may be responsible for are firewall management, IDS/IPS, perimeter security, protective DNS, vulnerability detection/response, secure email and spam protection, application whitelisting, remote access, etc).
• Server ownership - building, hardening, securing, and ongoing management of assigned server assets.
  • Identifying and mitigating vulnerabilities on assigned assets.
  • Ensures assigned systems and required data is backed up successfully.
  • Ensures adherence to IT security control requirements.
• Security Application ownership
  • Effective configuration of application functionality, detection, and mitigation abilities.
  • Identifying and mitigating vulnerabilities on assigned applications.
  • Review system, application, and security logs across assigned systems to ensure that all are functional and secure.
• Manages and leverages third party vendor relationships as required.
• Participates in the planning and execution of the Business Continuity and Disaster Recovery Plan.
• Ensures assigned systems and applications are prepared for planned or unplanned DR failover.
• Manages and communicates system and applications changes using the change management process.
• Track and understand emerging security practices and threats. Leverage this knowledge to improve security configurations across the enterprise and hunt for potential or active threats.

Requirements

Education

• Bachelor's Degree in computer science, information systems or equivalent work experience is required

Work Experience

• Experience managing and securing Microsoft Windows or Linux is is required
• 5+ years experience supporting security components and applying security best practices across an enterprise application/network infrastructure is required

Knowledge, Skills, and Abilities

• Working knowledge of IT security controls and how to manage their effectiveness.
• Strong understanding of cybersecurity protocols, including intrusion detection systems, firewalls, patch management, and vulnerability management.
• Formal technical training on Microsoft technologies, Network Operating Systems and Internet perimeter components required.
• Working knowledge of CIS Top 18 Controls or alternative security frameworks.
• Certified Information Systems Security Professional (CISSP) desired but not required.
• An ability to perform independent analysis of complex problems and distill relevant findings and root causes
• Must possess excellent analytical, organizational and documentation skills.
• Experience analyzing and interpreting alert notifications from organizations such as FS-ISAC and CERN
• Candidates for this position must be authorized to work in the United States on a full time basis for any employer without restriction
• Visa Sponsorship will not be provided for this position
• Valid Drivers License required
• No relocation assistance is provided.

Licenses and Certifications

• Industry standard certification required in a technical discipline to include one of the following Network Operating System (Microsoft), or Network infrastructure, or Information Security. Required

Expected Pay Range

The expected annual pay range for this role is $76,463 to $135,731. This pay range is the annual salary we in good faith expect to pay for this role at the time of posting. Actual compensation paid may fluctuate higher or lower than the posted range and the range may be modified in the future due to several factors including, but not limited to, relevant experience, certifications, and qualifications, internal equity, adjustments to the requirements and responsibilities of the job, business needs, and economic and market data.

Overview

The cybersecurity engineer has a dual role in the Bank: a responsibility for architecting, building, and maintaining secure environments and applications that are designed to protect the Bank's networks, data and digital assets from risk. In addition, a responsibility for monitoring, detecting, and responding to security related risks. Their primary focus is strengthening defenses, identifying vulnerabilities and weaknesses, responding to threats, and implementing measures to continually strengthen the Banks security posture. ** Please note: New hires work on-site in the Massachusetts office for 90 days before transitioning to a hybrid or remote schedule. **

Responsibilities

• Threat Hunting, Monitoring, Detection, and Response:
• Monitor security alerts and dashboards (SIEM, Vulnerability Management, , etc.) for suspicious activity.
  • Triage and respond to security incidents. Escalate to senior analysts or the incident response team when necessary.
  • Investigate and document security observations/incidents, ensuring resolution.
  • Analyze logs, network traffic, and endpoint activity for signs for malicious behavior.
  • Perform regular vulnerability assessments and prioritize risk within the network, system, and applications.
• Create formal incidents and support the investigation of such incidents.
• Conduct Security Assessments: Perform regular security audits, vulnerability assessments, and penetration testing to identify and mitigate potential risks.
• Correlate telemetry data from security systems to identity cyber threats, risk patterns, and control weaknesses.
• System & Security Application Administration:
• Implementation, secure configuration, and ongoing management of the Bank’s security environments and applications. Examples of systems/functions a Cyber Security Engineer may be responsible for are firewall management, IDS/IPS, perimeter security, protective DNS, vulnerability detection/response, secure email and spam protection, application whitelisting, remote access, etc).
• Server ownership - building, hardening, securing, and ongoing management of assigned server assets.
  • Identifying and mitigating vulnerabilities on assigned assets.
  • Ensures assigned systems and required data is backed up successfully.
  • Ensures adherence to IT security control requirements.
• Security Application ownership
  • Effective configuration of application functionality, detection, and mitigation abilities.
  • Identifying and mitigating vulnerabilities on assigned applications.
  • Review system, application, and security logs across assigned systems to ensure that all are functional and secure.
• Manages and leverages third party vendor relationships as required.
• Participates in the planning and execution of the Business Continuity and Disaster Recovery Plan.
• Ensures assigned systems and applications are prepared for planned or unplanned DR failover.
• Manages and communicates system and applications changes using the change management process.
• Track and understand emerging security practices and threats. Leverage this knowledge to improve security configurations across the enterprise and hunt for potential or active threats.

Requirements

Education

• Bachelor's Degree in computer science, information systems or equivalent work experience is required

Work Experience

• Experience managing and securing Microsoft Windows or Linux is is required
• 5+ years experience supporting security components and applying security best practices across an enterprise application/network infrastructure is required

Knowledge, Skills, and Abilities

• Working knowledge of IT security controls and how to manage their effectiveness.
• Strong understanding of cybersecurity protocols, including intrusion detection systems, firewalls, patch management, and vulnerability management.
• Formal technical training on Microsoft technologies, Network Operating Systems and Internet perimeter components required.
• Working knowledge of CIS Top 18 Controls or alternative security frameworks.
• Certified Information Systems Security Professional (CISSP) desired but not required.
• An ability to perform independent analysis of complex problems and distill relevant findings and root causes
• Must possess excellent analytical, organizational and documentation skills.
• Experience analyzing and interpreting alert notifications from organizations such as FS-ISAC and CERN
• Candidates for this position must be authorized to work in the United States on a full time basis for any employer without restriction
• Visa Sponsorship will not be provided for this position
• Valid Drivers License required
• No relocation assistance is provided.

Licenses and Certifications

• Industry standard certification required in a technical discipline to include one of the following Network Operating System (Microsoft), or Network infrastructure, or Information Security. Required

Expected Pay Range

The expected annual pay range for this role is $76,463 to $135,731. This pay range is the annual salary we in good faith expect to pay for this role at the time of posting. Actual compensation paid may fluctuate higher or lower than the posted range and the range may be modified in the future due to several factors including, but not limited to, relevant experience, certifications, and qualifications, internal equity, adjustments to the requirements and responsibilities of the job, business needs, and economic and market data.

EEO Statement

Middlesex Savings Bank is an Equal Opportunity Employer/protected Veterans/Individuals with Disabilities