Cybersecurity Engineer (Cybersecurity)

Location: Hybrid role based in Rockville, Maryland, United States, performed in a traditional office environment with an option for telework. Occasional local travel among offices may be required.

Annual base salary: $78,100–$116,200, with potential discretionary or non-discretionary bonuses.

Company

hirify.global develops life sciences and diagnostic solutions.

What you will do

• Analyze, investigate, respond to, and recover from cybersecurity incidents, events, and threats according to the incident response lifecycle.
• Configure, maintain, and tune vulnerability management and SIEM platforms, including scan coverage, credentialed scanning, log source onboarding, correlation, alerting, and triage.
• Analyze and prioritize vulnerabilities by risk, exploitability, and business context; define remediation queues and track remediation to closure with IT and engineering teams.
• Engineer security solutions, preventative measures, compensating workarounds, and improvements to the organization’s cybersecurity posture.
• Support email security operations and phishing triage, including analysis of reported messages and containment actions.
• Evaluate cybersecurity technologies, improve security metrics, and provide hands-on support for security concerns and IT risks.

Requirements

• Bachelor’s degree in Cybersecurity, MIS, computer science, or a related field with a cybersecurity concentration, or an equivalent combination of education and relevant experience.
• At least three years of relevant cybersecurity experience with hands-on administration of security tooling. Experience may include vulnerability management, security monitoring, incident response, or solution engineering.
• Knowledge of network-based, system-level, and application-layer attacks and mitigation methods.
• Working knowledge of Microsoft Windows and Linux administration, AWS and core cloud security concepts.
• Hands-on experience configuring and operating vulnerability management and SIEM platforms, including scan configuration, log source onboarding, and alert tuning.
• Knowledge of network and application security, infrastructure hardening, security baselines, web server and database security, security testing, security integration and governance, malware analysis, incident response, cloud security, or risk and compliance.
• Familiarity with security standards, access controls, and compliance requirements based on industry standards.
• Working knowledge of secure network design, including network segmentation and traffic filtering between internal segments.
• Ability to create, maintain, and report metrics measuring the effectiveness of security controls; solutions-oriented approach, initiative, communication skills, and ability to work independently and collaboratively.

Nice to have

• Life sciences experience.
• Industry certification such as GCIH, GCIA, OSCP, Security+, or a similar recognized certification.
• Microsoft Office 365 security administration experience.
• Basic understanding of data security, including classification, encryption, and DLP.
• Scripting and automation skills in Bash, Python, PowerShell, or similar technologies.

Culture & Benefits

• Hybrid work with an option for telework in a traditional office environment.
• Medical, dental, vision, prescription, flexible spending, and employee assistance benefits.
• 401(k) plan with company matching, paid vacation, sick leave, holidays, and parental leave.
• Company-paid short- and long-term disability insurance and group life and accidental death and dismemberment insurance.
• Additional voluntary perks include fitness club contribution, pet insurance, identity theft protection, home and auto insurance discounts, and optional supplemental life insurance.
• Equal Opportunity/Affirmative Action workplace with E-Verify work eligibility validation.