Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

Ready to help protect a growing supply chain leader? WSI is looking for a hands-on Senior Cybersecurity Engineer to strengthen vulnerability management, security operations, identity protection, and incident response. In this high-impact role, you'll partner with IT and business leaders, mentor teams on security best practices, and help build a proactive security culture across the organization.

Duties and Accountabilities:

• Administer and optimize our Rapid7 platform (InsightVM and Managed Detection & Response) to run the enterprise vulnerability management program across on-premises, cloud, and mixed Windows/Linux environments.
• Design and maintain a risk-based vulnerability prioritization framework, incorporating asset criticality, exploitability, and business context rather than age alone.
• Lead the weekly Vulnerability Management review cadence, producing remediation metrics and driving remediation timelines to closure with IT, Infrastructure, and business stakeholders.
• Maintain and mature the organization's CIS Critical Security Controls (CIS 18) program, tracking control implementation, identifying gaps, and prioritizing remediation roadmaps.
• Own and maintain the organization's Security Incident Response Plan, and lead its execution during security incidents identified through Rapid7 MDR (e.g., credential resets, session/MFA revocation, device isolation), including documentation of root cause and resolution.
• Monitor and manage the SSL certificate lifecycle across endpoints, proactively identifying and remediating expired or soon-to-expire certificates.
• Own the Security Awareness Program, including phishing simulation and reporting (PhishAlert) and associated metrics, to build a culture of security awareness across the organization.
• Review, develop, and maintain IT and security policies, standards, and procedures (e.g., the electronic use/acceptable use policy, data protection policy, and emerging areas such as AI usage policy), in partnership with the Director of Cybersecurity & Infrastructure.
• Own Zero Trust and Conditional Access policy design within Microsoft Entra ID, including MFA policy, identity protection alerting, and least-privilege role design.
• Review privileged access requests, applying least-privilege and risk-based decision-making, and conduct periodic access reviews for sensitive systems.
• Coordinate external penetration testing and vulnerability assessment engagements; validate, triage, and integrate findings into the vulnerability management program.
• Conduct proactive threat hunting to identify potential compromises, misconfigurations, and emerging risks ahead of formal alerts.
• Evaluate and select security and business applications/software prior to deployment, including endpoint/EDR tooling, by building vendor scoping documents, leading vendor evaluation sessions, and assessing third-party/vendor security risk.
• Produce and deliver a monthly security metrics and dashboard report to leadership summarizing vulnerability management, incident, and program status.
• Partner with leadership on annual planning to identify and prioritize the coming year's security initiatives.
• Partner with and mentor IT associates on security best practices, helping to elevate the organization's overall security posture.
• Support completion of cyber insurance renewal questionnaires and audit/compliance documentation requests.
• Collaborate with Infrastructure, Legal, HR, and external partners (auditors, MSSP/vendor partners) on security initiatives, incident response, and contractual or compliance requirements.

Required Knowledge, Skills, and Abilities:

• Hands-on experience administering Rapid7 InsightVM and/or Rapid7 MDR, or a comparable enterprise vulnerability management/MDR platform.
• Working knowledge of security frameworks (such as CIS 18 or NIST CSF) and experience assessing or tracking control maturity.
• Experience designing and administering Zero Trust/Conditional Access policies, MFA, and identity protection within Microsoft Entra ID.
• Experience coordinating penetration tests or vulnerability assessments and translating findings into a prioritized remediation program.
• Solid understanding of infrastructure fundamentals (networking, Windows/Linux server administration, Active Directory/Entra ID) sufficient to assess risk.
• Demonstrated experience developing, reviewing, or maintaining IT and security policies, standards, and procedures.
• Incident response experience, including credential/session remediation, endpoint isolation, and clear written documentation of findings.
• Experience evaluating third-party vendors, applications, or software from a security risk perspective.
• Strong analytical and problem-solving skills, with the ability to communicate technical risk clearly to both technical and non-technical stakeholders, including in monthly leadership reporting.
• Demonstrated ability to mentor or coach colleagues on security best practices.
• Ability to work independently and manage multiple competing priorities in a fast-paced environment.

Preferred Education and Experience:

• 5+ years of experience in a dedicated cybersecurity role, ideally including vulnerability management and MDR/SIEM operations.
• One or more of the following certifications preferred: Security+, CISSP, CISM, or CCSP.
• Experience supporting compliance or regulatory requirements (e.g., cyber insurance questionnaires, data protection/privacy policy).
• Experience evaluating and scoping security tooling or vendor solutions.

Physical Capabilities and Requirements:

• Sitting at a desk or standing at a workstation for extended periods (often 6 to 8 hours a day).
• Close visual acuity to view computer monitors, analyze data, and review security logs and technical documentation.
• Frequent use of hands, wrists, and fingers for typing, operating a mouse, and handling phone equipment.
• Ability to clearly speak, hear, and exchange information verbally and in writing with team members and stakeholders.

Benefits and Total Rewards:

• Competitive wages, and opportunities for advancement.
• Medical, Dental, Vision, Critical Illness, Accident, and Flexible Spending Plans available.
• Company-paid Short/Long-term Disability, Life Insurance, and Employee Assistance plans.
• Company-paid Time-Off (PTO), Sick Leave, and Holiday Pay.
• Retirement 401(k) Plan with Discretionary Employer Match, and Profit Sharing.
• Wellness Programs, Clothing Allowance, Safety Shoes, and Safety Glasses Reimbursement.

Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.