Cybersecurity Engineer – Patch Management, Testing & Automation

Rohde & Schwarz (China) Technology Co., Ltd.; Frederick (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Rohde & Schwarz (China) Technology Co., Ltd. in Frederick, MD seeks a cybersecurity patch management specialist. You will develop and execute patch management for systems, OS, and devices, evaluating patches and CVEs for impact and coordinating with engineering and customers.

You’ll build test plans, perform lab and security testing, verify remediation, and develop automation to improve security engineering across programs.

Qualifications

• Experience in patch management and cybersecurity testing.
• Familiarity with CVE analysis and security advisories.
• Ability to coordinate with engineering, testing and vendors.
• Knowledge of lab testing, interoperability and regression testing.
• Scripting and automation for security testing.
• Experience with network devices and operating systems security.

Responsibilities

• Develop, execute, and improve patch management processes for various systems.
• Evaluate patches, firmware updates, and CVEs for applicability and impact.
• Coordinate patch evaluation with engineering, cybersecurity, testing, vendors, and customers.
• Create patch testing plans, test cases, and acceptance criteria.
• Perform laboratory, security verification, and regression testing.
• Validate patches remediate vulnerabilities without impacting functionality.
• Support deployment planning, customer coordination, and post-deployment verification.
• Build and maintain cybersecurity test environments.
• Develop repeatable test methodologies for devices and software.
• Perform vulnerability scanning and security control validation.
• Develop scripts and automation to improve testing efficiency.
• Automate configuration generation and validation for network devices and firewalls.
• Develop automation for assessments, compliance checks, and reporting.
• Create reusable tools, templates, and secure baselines for programs.
• Support secure configuration and hardening of systems and devices.
• Assist with DISA STIGs, CIS Benchmarks, and NIST controls.

Job description

• Develop, execute, and continuously improve cybersecurity patch management processes for systems, operating systems, network devices, COTS products, appliances, and embedded components.
• Evaluate security patches, software updates, firmware updates, vendor advisories, and CVEs for applicability and operational impact.
• Coordinate patch evaluation with product engineering, systems engineering, cybersecurity, testing teams, vendors, and customers.
• Develop patch testing plans, procedures, test cases, acceptance criteria, and supporting documentation.
• Perform laboratory testing, security verification testing, configuration validation, interoperability testing, and regression testing.
• Validate that patches and security updates remediate identified vulnerabilities without adversely affecting system functionality, performance, availability, or interoperability.
• Support deployment planning, customer coordination, installation, post-deployment verification, and patch documentation.
• Build and maintain representative cybersecurity test and validation environments.
• Develop repeatable test methodologies for network devices, operating systems, applications, COTS products, and embedded devices.
• Perform vulnerability scanning, configuration assessments, protocol analysis, and security control validation as part of testing activities.
• Develop scripts and automation to improve cybersecurity engineering efficiency and consistency.
• Automate configuration generation and validation for technologies such as Cisco switches and routers and Fortinet firewalls where appropriate.
• Develop automation for security assessments, compliance checks, vulnerability analysis, evidence collection, test execution, configuration comparison, and reporting.
• Develop reusable tools, templates, scripts, secure baselines, and standardized processes that can be applied across multiple programs.
• Support secure configuration and hardening of network devices, Linux and Windows systems, firewalls, applications, and embedded products.
• Support implementation and validation of DISA STIGs, CIS Benchmarks, NIST controls, and customer-specific security requirements.
• Participate in system security architecture reviews, threat modeling, vulnerability management, and product security assessments.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and witness testing.
• Troubleshoot cybersecurity-related system, network, configuration, and interoperability issues in laboratory and customer environments.
• Produce test reports, patch assessment reports, implementation procedures, configuration documentation, and technical cybersecurity deliverables.
• Collaborate with product and engineering teams in Europe and North America to evaluate updates, resolve technical issues, and improve system security.
• Evaluate new cybersecurity tools and technologies that can improve testing, automation, configuration management, and security engineering.
• Support cybersecurity training, knowledge transfer, process improvement, and standardization.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.