Security Engineer - Enterprise Cyber Defense

McNees Wallace & Nurick; Pittsburgh (Allegheny County); On-site; USD 110,000 - 140,000; Full time

Job summary

McNees Wallace & Nurick LLC is seeking a Security Engineer to join the Information Technology department. You will design, implement, and maintain enterprise security infrastructure and lead the firm's cybersecurity roadmap in alignment with business objectives.

Responsibilities include monitoring, responding to incidents, conducting vulnerability assessments, and enforcing security policies. Strong IAM, risk management, and collaboration with cross-functional teams are essential.

Qualifications

• Bachelor's degree in information security or related field.
• 5+ years of cybersecurity experience with complex programs.
• Strong knowledge of NIST CSF, CIS Controls, ISO 27001.
• Experience with SIEM, EDR, firewalls, IDS/IPS.
• CISSP/CISM/CEH or similar certifications preferred.

Responsibilities

• Design, implement, and maintain enterprise security infrastructure and tools.
• Lead the cybersecurity strategy and roadmap aligned to business goals.
• Monitor alerts, investigate incidents, and coordinate responses.
• Perform vulnerability assessments and coordinate remediation.
• Develop and enforce security policies and procedures.
• Oversee IAM, MFA, SSO, and access reviews.
• Support audits, risk assessments, and vendor security reviews.
• Lead incident response, disaster recovery, and major security projects.
• Collaborate with IT and business teams to embed security requirements.
• Advise leadership on security architecture and investments.

Skills

Zero-trust security

Incident response

Security governance

Threat modeling

Cloud security

Network security

Threat hunting

Scripting (PowerShell)

Scripting (Python)

Communication

Education

Bachelor's in Information Security or related

Master's degree preferred

Tools

SIEM platforms

EDR

Firewalls

IDS/IPS

Azure security

Job description

McNees Wallace & Nurick LLC is seeking a Security Engineer to join the Information Technology department. You will design, implement, and maintain enterprise security infrastructure and lead the firm's cybersecurity roadmap in alignment with business objectives.

Responsibilities include monitoring, responding to incidents, conducting vulnerability assessments, and enforcing security policies. Strong IAM, risk management, and collaboration with cross-functional teams are essential.