Senior IT Security Engineer

Supernus Pharmaceuticals Inc; Rockville (MD); On-site; USD 160,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401k company match

Stock equity awards

Employee stock purchase program

Paid time off

Company-paid life insurance

Health and wellness benefits

Discretionary annual bonus

Job summary

Supernus Pharmaceuticals Inc in Rockville, MD is seeking a Senior IT Security Engineer to architect, operate, and mature enterprise security controls that protect systems, data, and users.

You will lead incident response, manage vulnerability programs, and implement security by design across on-premises and cloud environments, while guiding policy development and user awareness initiatives.

Qualifications

• Bachelor’s degree in cyber/IT Security or related field.
• 12+ years IT security experience in enterprise environments.
• Authorized to work in the United States without visa sponsorship.

Responsibilities

• Operate, tune, and integrate security platforms to maintain enterprise-wide situational awareness.
• Own triage and investigation of security alerts from the SOC.
• Lead incident response for events impacting confidentiality, integrity, or availability.
• Develop, review, and maintain IT security policies and technical controls.
• Oversee vulnerability management across endpoints, servers, apps, and cloud workloads.
• Analyze phishing and suspicious emails; provide user guidance.
• Drive security training and awareness programs using KnowBe4.
• Establish secure configurations and patching standards; ensure rapid updates.
• Translate threat intel into actionable recommendations for leadership.
• Embed security by design in new systems and cloud initiatives.
• Mentor IT staff and lead post-incident reviews.
• Enforce least-privilege access controls.

Skills

12+ years IT security

Leadership

Independent worker

Education

Bachelor’s degree in cyber/IT Security or related field

Tools

CrowdStrike

Zscaler

Microsoft Defender

Microsoft Endpoint Manager

Tenable

Office 365

Azure AD

SIEM

Active Directory

PKI

RADIUS

Log analysis

KnowBe4

Job description

Supernus Pharmaceuticals Inc is hiring a Senior IT Security Engineer to architect, operate, and mature enterprise security controls that protect systems, data, and users.

Responsibilities

• Operate, tune, and integrate security platforms including CrowdStrike, Zscaler, Microsoft Defender, Microsoft Endpoint Manager, Tenable, Office 365, Azure AD, and associated logging solutions to maintain enterprise-wide situational awareness.
• Own triage and investigation of security alerts originating from the external Security Operations Center (SOC), distinguishing false positives from true incidents.
• Coordinate and, when needed, lead incident response for events impacting confidentiality, integrity, or availability; elevate to IT Leadership with impact, risk, and recommended remediation.
• Develop, review, and maintain IT security policies, standards, procedures, and technical control documentation aligned with industry best practices and regulatory requirements.
• Oversee vulnerability management including analysis, prioritization, and tracking remediation across endpoints, servers, applications, and cloud workloads; partner with infrastructure and application teams to drive timely closure.
• Analyze suspicious emails by ensuring accurate classification, supporting metrics and reporting, and communicating findings and preventive guidance to users.
• Drive the use of the Supernus KnowBe4 platform to plan and deploy ongoing security and privacy training, phishing simulations, and awareness campaigns; provide feedback on effectiveness.
• Establish and maintain secure configurations and patching standards; ensure critical security updates are evaluated, tested, and deployed rapidly.
• Monitor cybersecurity intelligence feeds, news, and threat actor TTPs; translate threat information into actionable recommendations for Supernus.
• Synthesize and communicate the impact of security bulletins and publicly disclosed vulnerabilities; advise leadership and technical teams on risk and mitigations.
• Partner with extended IT teams to embed security by design into new systems, cloud initiatives, and modernization efforts for legacy platforms, providing guidance on secure architectures and patterns.
• Lead or support technical post-incident reviews, root cause analysis, and lessons learned; ensure corrective actions are identified, tracked, and implemented.
• Champion and enforce security policies, procedures, and least-privilege access control standards across IT and business units to support audit and compliance activities.
• Evaluate and recommend emerging security technologies, services, and standards; build business cases where appropriate and help plan security roadmap enhancements.
• Collaborate cross-functionally (infrastructure, application development, data, compliance, and business stakeholders) to design and deliver security solutions that enable business outcomes while managing risk.
• Mentor, coach, and provide technical direction to other IT staff to foster continuous improvement and knowledge sharing.
• Other responsibilities and projects as assigned.

Requirements

• Bachelor’s degree in cyber/IT Security, Computer Science, Computer Engineering, or related field required.
• 12+ years of progressive experience in IT security and system administration, including considerable experience in enterprise security engineering and operations.
• Microsoft Security, Certified Information Systems Security Professional (CISSP), or similar certifications highly preferred.
• Proven ability implementing, managing, and optimizing security software systems and products in complex environments.
• Deep knowledge of system and software management best practices with demonstrated troubleshooting and resolution of complex security and infrastructure issues.
• Strong understanding of Security Operations Center processes including monitoring, incident handling, and escalation.
• Demonstrated knowledge of data privacy and protection practices and relevant regulatory expectations.
• Advanced working knowledge of security technologies including SIEM, intrusion detection/prevention, endpoint protection, web proxy/content filtering, Active Directory, PKI, RADIUS, and log analysis.
• Ability to work independently and as part of a team while maintaining high ethical standards of integrity and quality.
• Ability to take an innovative and dynamic approach to work.
• Self-starter comfortable working independently and in a team environment.
• Ability to consistently exhibit Supernus Values in interactions with employees, vendors, customers, and others.
• Authorized to legally work in the United States without visa sponsorship.
• Capable of performing other duties as assigned by Management.

Technologies

• CrowdStrike
• Zscaler
• Microsoft Defender
• Microsoft Endpoint Manager
• Tenable
• Office 365
• Azure AD
• Logging solutions
• Supernus KnowBe4 platform
• SIEM
• Intrusion detection/prevention
• Endpoint protection
• Web proxy/content filtering
• Active Directory
• PKI
• RADIUS
• Log analysis

Benefits

• Health
• Dental
• Vision
• Paid time off
• 401k company match
• Company-paid life insurance
• Health and wellness benefits
• Stock equity awards
• Employee stock purchase programs
• Participation in the Company’s discretionary annual bonus program

Work Environment / Physical Requirements / Travel

• Lifting requirements: exerting up to 35 pounds of force occasionally, up to 10 pounds of force frequently, and negligible force regularly to move objects.
• Close visual acuity required for preparing and analyzing data, transcribing, viewing a computer terminal, and extensive reading.
• Not substantially exposed to adverse environmental conditions.
• Travel to Supernus HQ as needed for meetings, projects, and other business activities.

Compensation

• Expected salary range: $160,000 to $190,000 per year for fully qualified candidates.
• Total compensation includes other elements such as stock equity awards, employee stock purchase programs, and participation in the Company’s discretionary annual bonus program.

Location: Rockville, MD (onsite)

Experience: 12+ years

Salary: USD 160,000 - 190,000 per yearly