Cybersecurity Engineer

Title

Cybersecurity Engineer

Location

Rockville, MD

Target Start Date

ASAP

Salary / Pay Rate

DOE

Why Work Here

This is an established life sciences company whose technology supports scientific research and discovery, giving the security team a mission that matters. You would join a dedicated cybersecurity group working closely with a senior cybersecurity architect, where your input helps shape how the program grows. The team is hands-on and collaborative, partnering with IT and engineering rather than working in a silo. There is real room to evaluate and bring in new security technologies, and ongoing learning through conferences, training, and industry events is part of the job. The role also pairs a stable office setting with the flexibility of telework.

About the Role

This role sits on the cybersecurity team and focuses on strengthening the security posture across the organization. The engineer runs and tunes the core security tooling, prioritizes and drives vulnerability remediation alongside IT and engineering teams, and provides hands-on support for security monitoring and incident response. The position reports to a senior cybersecurity architect and is expected to stay current on industry trends.

Responsibilities

• Investigate, analyze, respond to, and recover from cybersecurity incidents, events, and threats following the incident response lifecycle.
• Configure and maintain the enterprise vulnerability management platform, covering scan coverage, credentialed scans, and reporting.
• Analyze and prioritize vulnerabilities based on risk, exploitability, and business context, and set the remediation queue.
• Work with IT and engineering teams to identify remediation options or compensating workarounds, track remediation through to closure, and advise teams on preventative measures.
• Engineer security solutions that reduce risk and strengthen the organization's security posture.
• Configure, tune, and operate the SIEM platform, including onboarding log sources, building correlation and alerting logic, and triaging alerts.
• Support email security operations and phishing triage, including reviewing reported messages and taking follow-up containment actions.
• Evaluate and select assessment tools and other cybersecurity technologies to strengthen security solutions.
• Understand the IT security infrastructure and business requirements, and work with the team to investigate and mitigate security concerns and IT risks as needed.
• Evaluate and assess security technologies to expand the organization's cybersecurity portfolio where appropriate.
• Keep current on industry updates and changes through conferences, training, and events.
• Drive continuous improvement of the security posture and provide hands-on support to address cybersecurity issues as they arise.
• Collect, report on, and continually improve security metrics.

Required Skills

• Bachelor's degree in Cybersecurity, MIS, Computer Science, or a related field with a cybersecurity concentration, or an equivalent combination of education and relevant experience.
• 3+ years of relevant cybersecurity experience, including hands-on administration of security tooling; background in vulnerability management, security monitoring, incident response, or solution engineering preferred.
• Knowledge of network level, system level, and application layer attacks and how to mitigate them.
• Working knowledge of Microsoft Windows and Linux platform administration.
• Basic working knowledge of Amazon Web Services (AWS) and core cloud security concepts.
• Hands-on experience configuring and running vulnerability management and SIEM platforms, including scan configuration, log source onboarding, and alert tuning.
• Knowledge across security topics such as network and application security, infrastructure hardening, security baselines, web server and database security, security testing, security integration and governance, malware analysis, incident response, and cloud security or risk and compliance.
• Familiarity with industry security standards, access controls, and compliance requirements.
• Working knowledge of secure network design, including segmentation and traffic filtering between internal segments.
• Ability to build, maintain, and report on metrics that measure how effective security controls are.

Bonus / Soft Skills

• Experience in the life sciences industry.
• Industry certification such as GCIH, GCIA, OSCP, Security+, or a similar recognized certification.
• Microsoft Office 365 security administration experience.
• Basic understanding of data security, including classification, encryption, and DLP.
• Scripting and automation skills in Bash, Python, PowerShell, or similar.
• Solutions-oriented problem solver who takes initiative.
• Highly motivated, eager to learn new technologies, and wants to be a hands-on engineer.
• Effective communicator with a positive, confident attitude.
• Works well both independently and as part of a team.
• Creative, collaborative, proactive, and self-motivated in executing and completing assigned work.

Welcome to ConsultNet, a premier national provider of technology talent and solutions. Our expertise spans across project services, contract-to-hire, direct search, and managed services onshore, nearshore, and hybrid. For over 25 years, we have connected thousands of consultants with meaningful roles through a personal, communication-driven approach, partnering with a diverse client base to build high-performing teams and create lasting impact. Our comprehensive service offerings cover a wide range of technology and engineering positions across key markets nationwide. Learn more at

www.consultnet.com

.

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.