Sr. Specialist, Cybersecurity Engineering

Merck & Co.; Rahway (NJ); On-site; USD 120,000 - 150,000; Full time

Job summary

Merck & Co. seeks a hands-on Senior Specialist in Cybersecurity Engineering to secure strategic enterprise platforms through implementation, automation, and risk reduction.

You will partner with platform owners, engineers, and product teams to embed security controls and improve resilience across critical business platforms. The role covers security controls across SAP, Salesforce, Microsoft 365, ServiceNow, and cloud-native services, plus CI/CD integration, automation, and incident response.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field.
• 5+ years of cybersecurity engineering, cloud security, platform security, or DevSecOps experience.
• Able to apply AI to improve cybersecurity engineering, automation, investigations, and operational efficiency.
• Hands-on experience implementing security controls in PaaS, SaaS, or enterprise platforms.

Responsibilities

• Engineer, implement, and maintain security controls across strategic platforms including SAP, Salesforce, Databricks, Microsoft 365, ServiceNow, Veeva, AI platforms, and enterprise SaaS/PaaS services.
• Support platform assurance through security assessments, control validation, risk reduction, and compliance readiness activities.
• Integrate security capabilities into platform delivery, CI/CD workflows, and operational processes.
• Develop automation, controls-as-code, and reusable security patterns to improve platform security and operational efficiency.
• Monitor platform security posture, investigate gaps, and drive remediation of findings.
• Partner with platform teams to improve resilience, onboarding experience, and secure adoption.
• Contribute to security standards, operational procedures, and engineering best practices.

Skills

Cybersecurity engineering

Cloud security

Platform security

DevSecOps

AI security

Identity Access Management

Kubernetes

CI/CD pipelines

Vulnerability remediation

Monitoring

Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field

Tools

Kubernetes

Job description

Job Description

Role Summary

The Senior Specialist, Cybersecurity Engineering is a hands-on security engineer responsible for securing our Company's strategic enterprise platforms through implementation, automation, assurance, and continuous risk reduction. This role partners with platform owners, engineers, architects, and product teams to embed security controls, improve resilience, standardize governance, and maintain trusted platform operations across critical business platforms.

Key Responsibilities

• Engineer, implement, and maintain security controls across strategic platforms including SAP, Salesforce, Databricks, Microsoft 365, ServiceNow, Veeva, AI platforms, and enterprise SaaS/PaaS services.
• Support platform assurance through security assessments, control validation, risk reduction, and compliance readiness activities.
• Integrate security capabilities into platform delivery, CI/CD workflows, and operational processes.
• Develop automation, controls-as-code, and reusable security patterns to improve platform security and operational efficiency.
• Monitor platform security posture, investigate gaps, and drive remediation of findings.
• Partner with platform teams to improve resilience, onboarding experience, and secure adoption.
• Contribute to security standards, operational procedures, and engineering best practices.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field.
• 5+ years of experience in cybersecurity engineering, cloud security, platform security, or DevSecOps.
• Fluent in modern AI technologies and practical enterprise use cases.
• Able to apply AI to improve cybersecurity engineering, automation, investigations, and operational efficiency.
• Understands emerging AI security risks and supports secure adoption of AI capabilities across strategic platforms.
• Hands-on experience implementing security controls in PaaS, SaaS, or enterprise platforms.
• Experience with identity security, security automation, logging, monitoring, and vulnerability remediation.
• Knowledge of Kubernetes, APIs, CI/CD pipelines, and modern cloud-native technologies.
• Strong troubleshooting, problem-solving, and collaboration skills.

Preferred Qualifications

• Experience supporting SAP, Salesforce, Databricks, Microsoft 365, ServiceNow, Veeva, or similar enterprise platforms.
• Experience with AI security, software supply chain security, and platform governance.
• CISSP, CCSP, CCSK, GIAC, AWS, or Azure security certifications.
• Experience in regulated enterprise environments.

Preferred Skills:

• Experience supporting SAP, Salesforce, Databricks, Microsoft 365, ServiceNow, Veeva, or similar enterprise platforms.
• Experience with AI security, software supply chain security, and platform governance.
• CISSP, CCSP, CCSK, GIAC, AWS, or Azure security certifications.
• Experience in regulated enterprise environments.

Required Skills:

Certificate Services, Certificate Services, Cloud Security, Corporate Security Management, Cybersecurity, Cybersecurity Analytics, Cybersecurity Operations, Delivery of Security Applications, Design Applications, DevSecOps, Identity Access Management (IAM), Incident Response, Information Assurance, Information Security, IT Security Architecture, Network Segmentation, Operational Technology (OT) Security, Platform as a Service (PaaS),