Senior Cybersecurity Engineer

Msupply; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Life and AD&D insurance

401(k) plan

Vacation time

Job summary

mSupply is seeking a Senior Cybersecurity Engineer to serve as a hands-on security expert and escalation point across a distributed multi-unit environment. You will engineer, detect, and automate security controls and investigations to protect corporate services, distribution operations, e-commerce, and supplier connections.

You will collaborate with Technology, DevOps, Audit, and business teams, driving scalable security solutions and meaningful risk reduction across a national remote work

Qualifications

• 7+ years of progressive IT experience preferred
• 5+ years in cybersecurity engineering, infrastructure security, or related
• Bachelor’s degree in CS/IT/Cybersecurity or related field preferred
• Strong expertise with SIEM, EDR/XDR, detection engineering, incident investigation, MITRE ATT&CK
• Hands-on experience in identity/access management, vulnerability management, cloud/SaaS security, or security automation
• Proven ability to lead complex investigations and translate findings into improvements
• Proficient with scripting, APIs, automation/orchestration, and version-controlled workflows

Responsibilities

• Engineer, integrate, and optimize enterprise SIEM, EDR/XDR, identity, email, collaboration, and managed detection capabilities.
• Develop and tune security detections, threat-hunting queries, dashboards, and automated response workflows, including MITRE ATT&CK mapping.
• Establish and maintain secure configuration baselines, security controls, telemetry integrations, health checks, and runbooks.
• Improve security monitoring through better log coverage, detection fidelity, and escalation readiness.
• Lead complex security incidents through triage, investigation, containment, and recovery.
• Serve as senior escalation point for security operations and managed detection providers, ensuring timely resolution.
• Develop and exercise incident-response playbooks and table-top scenarios.
• Prioritize vulnerabilities and findings based on exploitability and business impact.
• Validate remediation through rescanning and evidence review; manage security exceptions.
• Conduct security architecture reviews for applications, cloud/SaaS, DevSecOps, suppliers, and third-party integrations.
• Automate security analysis, evidence collection, and reporting to improve efficiency and visibility.
• Lead security-engineering initiatives and contribute to security standards and roadmaps.

Skills

SIEM

EDR/XDR

MITRE ATT&CK

incident investigation

scripting

APIs

cloud security

security automation

Education

Bachelor’s degree in Computer Science/IT/Cyrbersecurity

Tools

NIST CSF

ISO 27001

Splunk

Palo Alto

Job description

Do you love working with talented people? So do we!

Our team is growing and we’re looking for best-in-class talent. We value experienced, career-minded employees who focus on teamwork, professionalism and an unparalleled commitment to customer service. We offer full-time employees a competitive benefits package that includes health, dental and vision insurance, along with life and AD&D insurance, 401k plans, vacation time and more.

Browse positions available at mSupply and throughout our HVAC, plumbing and appliance parts business units nationwide. Use the filters to narrow by department, business unit or location.

Position:Senior Cybersecurity Engineer

Location: REMOTE

Remote Status: Remote

Job Id:4125-mSupply

# of Openings:1

About mSupply™

mSupply is a North American distributor of OEM repair parts and equipment serving the appliance, HVAC and plumbing industries. Headquartered in St. Louis, the company combines industry expertise with a broad product selection and a national distribution network.

With 2,000 employees across the United States and Canada, mSupply delivers speed and reliability at scale, with a vast product inventory and same-day shipping. Its family of brands is focused on making sure customers always get the Right Products. Right Now.™
For more information, visit mSupply.com.

Job Summary

The Senior Cybersecurity Engineer is a hands‑on cybersecurity expert and senior technical escalation point responsible for engineering and improving enterprise security controls, developing high‑value detections, leading complex investigations, automating security workflows, and driving identified risk to verified closure. This role supports a distributed, multi‑business‑unit environment spanning corporate services, branches, distribution operations, e‑commerce, customer‑facing platforms, supplier connections, and acquired‑company environments. The Senior Cybersecurity Engineer partners with Technology, Application, DevOps, Audit, business, and managed‑security teams to implement scalable, reliable, and measurable security solutions.

Job Duties & Responsibilities

• Engineer, integrate, and optimize enterprise SIEM, EDR/XDR, identity, email, collaboration, and managed detection capabilities.
• Develop and tune security detections, threat‑hunting queries, dashboards, and automated response workflows, including mapping coverage and gaps to MITRE ATT&CK.
• Establish and maintain secure configuration baselines, security controls, telemetry integrations, health checks, technical runbooks, and documented exceptions.
• Improve security monitoring through stronger log coverage, detection fidelity, alert severity, routing, escalation, and operational readiness.
• Lead complex security incidents through triage, investigation, evidence preservation, containment, eradication, recovery, and lessons learned, correlating endpoint, identity, email, cloud, application, network, and third‑party telemetry.
• Serve as the senior technical escalation point for security operations and managed detection providers, validating findings and driving timely resolution.
• Develop and exercise incident‑response playbooks and tabletop scenarios, converting lessons learned into sustainable security improvements.
• Prioritize vulnerabilities, misconfigurations, penetration‑test results, and security assessment findings based on exploitability, threat intelligence, business criticality, compensating controls, and operational impact.
• Validate remediation through rescanning, control testing, manual verification, and evidence review, and manage security exceptions through accountable closure.
• Conduct security architecture and design reviews for applications, cloud/SaaS, DevSecOps, AI, acquisitions, suppliers, and third‑party integrations.
• Automate security analysis, enrichment, evidence collection, remediation tracking, dashboards, and reporting to improve efficiency and visibility.
• Lead security‑engineering initiatives, mentor security team members, and contribute to security standards, roadmaps, audit evidence, and operating procedures.

Qualifications

• 7+ years of progressive Information Technology experience preferred.
• 5+ years of experience in cybersecurity engineering, infrastructure security, security operations, vulnerability management, or related technical disciplines preferred.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Engineering, or related field preferred.
• Strong expertise with SIEM, EDR/XDR, detection engineering, incident investigation, and MITRE ATT&CK.
• Hands‑on experience in at least two additional areas, such as identity and access management, vulnerability management, email/collaboration security, cloud/SaaS security, or security automation.
• Proven ability to lead complex, multi‑source investigations and translate findings into sustainable security improvements.
• Hands‑on proficiency with scripting, APIs, query languages, automation/orchestration, and version‑controlled workflows.
• Strong security fundamentals across TCP/IP networking, operating systems, cloud, identity, and applications.
• Experience with vulnerability management, penetration testing, and recognized security frameworks such as NIST CSF, CIS Controls, ISO 27001, or PCI DSS.
• Strong analytical, troubleshooting, documentation, communication, and collaboration skills, with sound judgment, composure under pressure, and accountability for results.

Preferred Certifications

• CISSP or comparable advanced cybersecurity certification.
• Experience in a distributed, e‑commerce, supply‑chain, or acquisition‑driven enterprise.
• Exposure to AI security, DevSecOps, cloud security, or security architecture.

Physical Demands & Work Environment

• Primarily sedentary work, requiring extended periods of sitting while working at a computer
• Ability to communicate effectively in person, via phone, and through virtual collaboration tools
• Occasional standing, walking, and movement during meetings, site visits, or travel
• Ability to lift and carry light materials (up to 15 lbs) occasionally, such as a laptop or presentation materials
• Ability to travel periodically for business needs, including visiting distribution centers, suppliers, stores, or industry events
• Office environment includes standard business equipment such as computers, phones, and conferencing tools

What We Offer:

• We prioritize your well‑being from day one with a comprehensive benefits package that includes:
• Medical, dental, vision, and prescription coverage effective immediately
• 401(k) plan with company contributions
• Life insurance and short- and long‑term disability coverage
• HSA/FSA options and an Employee Assistance Program (EAP)
• Paid time off, including vacation, holidays, and personal days
• Weekly pay, employee discounts, and more

Equal Employment Opportunity & Pre-Employment Requirements

mSupply is an Equal Opportunity Employer. We make employment decisions without regard to sex, age, race, color, creed, religion, national origin, citizenship or immigration status, sexual orientation, gender identity or expression, disability, genetic information, marital status, veteran or military status, or any other status protected by applicable federal, state, or local law.
We are committed to providing reasonable accommodation for qualified individuals with disabilities and to applicants with sincerely held religious beliefs, in accordance with applicable law. To request a reasonable accommodation, please contact [e-mail]. #mSupply
Final offers of employment may be contingent upon completion of job-related pre-employment checks and screenings permitted by law for the position. For roles that require operation of a company vehicle, a Motor Vehicle Record (MVR) check may also be conducted to determine insurability. This employer participates in E-Verify to confirm employment eligibility in the United States.

CORPORATE
One City Place, Suite 400
St Louis, MO 63141
[phone]