Cybersecurity Engineer – Patch Management, Testing & Automation

ROHDE & SCHWARZ GmbH & Co. KG; Frederick (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

ROHDE & SCHWARZ GmbH & Co. KG is seeking a cybersecurity patch management specialist to develop and refine patch processes across systems, devices, and embedded components.

You will evaluate advisories and CVEs, coordinate evaluations with engineering and customers, and build robust testing and validation routines. Responsibilities include laboratory testing, configuration validation, and evidence-backed reporting while ensuring patches do not impact functionality.

Responsibilities

• Develop, execute, and continuously improve cybersecurity patch management processes for systems, OS, network devices, COTS products, appliances, and embedded components.
• Evaluate patches, software updates, firmware updates, vendor advisories, and CVEs for applicability and operational impact.
• Coordinate patch evaluation with product engineering, systems engineering, cybersecurity, testing teams, vendors, and customers.
• Develop patch testing plans, procedures, test cases, acceptance criteria, and supporting documentation.
• Perform laboratory testing, security verification testing, configuration validation, interoperability testing, and regression testing.
• Validate that patches and security updates remediate identified vulnerabilities without adversely affecting system functionality, performance, availability, or interoperability.
• Support deployment planning, customer coordination, installation, post-deployment verification, and patch documentation.
• Build and maintain representative cybersecurity test and validation environments.
• Develop repeatable test methodologies for network devices, operating systems, applications, COTS products, and embedded devices.
• Perform vulnerability scanning, configuration assessments, protocol analysis, and security control validation as part of testing activities.
• Develop scripts and automation to improve cybersecurity engineering efficiency and consistency.
• Automate configuration generation and validation for technologies such as Cisco switches and routers and Fortinet firewalls where appropriate.
• Develop automation for security assessments, compliance checks, vulnerability analysis, evidence collection, test execution, configuration comparison, and reporting.
• Develop reusable tools, templates, scripts, secure baselines, and standardized processes that can be applied across multiple programs.
• Support secure configuration and hardening of network devices, Linux and Windows systems, firewalls, applications, and embedded products.
• Support implementation and validation of DISA STIGs, CIS Benchmarks, NIST controls, and customer-specific security requirements.
• Participate in system security architecture reviews, threat modeling, vulnerability management, and product security assessments.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and witness testing.
• Troubleshoot cybersecurity-related system, network, configuration, and interoperability issues in laboratory and customer environments.
• Produce test reports, patch assessment reports, implementation procedures, configuration documentation, and technical cybersecurity deliverables.
• Collaborate with product and engineering teams in Europe and North America to evaluate updates, resolve technical issues, and improve system security.
• Evaluate new cybersecurity tools and technologies that can improve testing, automation, configuration management, and security engineering.
• Support cybersecurity training, knowledge transfer, process improvement, and standardization.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.

Skills

Patch management

Cybersecurity testing

Automation scripting

Tools

Cisco switches

Fortinet firewalls

Job description

• Develop, execute, and continuously improve cybersecurity patch management processes for systems, operating systems, network devices, COTS products, appliances, and embedded components.
• Evaluate security patches, software updates, firmware updates, vendor advisories, and CVEs for applicability and operational impact.
• Coordinate patch evaluation with product engineering, systems engineering, cybersecurity, testing teams, vendors, and customers.
• Develop patch testing plans, procedures, test cases, acceptance criteria, and supporting documentation.
• Perform laboratory testing, security verification testing, configuration validation, interoperability testing, and regression testing.
• Validate that patches and security updates remediate identified vulnerabilities without adversely affecting system functionality, performance, availability, or interoperability.
• Support deployment planning, customer coordination, installation, post-deployment verification, and patch documentation.
• Build and maintain representative cybersecurity test and validation environments.
• Develop repeatable test methodologies for network devices, operating systems, applications, COTS products, and embedded devices.
• Perform vulnerability scanning, configuration assessments, protocol analysis, and security control validation as part of testing activities.
• Develop scripts and automation to improve cybersecurity engineering efficiency and consistency.
• Automate configuration generation and validation for technologies such as Cisco switches and routers and Fortinet firewalls where appropriate.
• Develop automation for security assessments, compliance checks, vulnerability analysis, evidence collection, test execution, configuration comparison, and reporting.
• Develop reusable tools, templates, scripts, secure baselines, and standardized processes that can be applied across multiple programs.
• Support secure configuration and hardening of network devices, Linux and Windows systems, firewalls, applications, and embedded products.
• Support implementation and validation of DISA STIGs, CIS Benchmarks, NIST controls, and customer-specific security requirements.
• Participate in system security architecture reviews, threat modeling, vulnerability management, and product security assessments.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and witness testing.
• Troubleshoot cybersecurity-related system, network, configuration, and interoperability issues in laboratory and customer environments.
• Produce test reports, patch assessment reports, implementation procedures, configuration documentation, and technical cybersecurity deliverables.
• Collaborate with product and engineering teams in Europe and North America to evaluate updates, resolve technical issues, and improve system security.
• Evaluate new cybersecurity tools and technologies that can improve testing, automation, configuration management, and security engineering.
• Support cybersecurity training, knowledge transfer, process improvement, and standardization.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.