Senior Cybersecurity Engineer

Ready to help protect a growing supply chain leader? WSI is looking for a hands-on Senior Cybersecurity Engineer to strengthen vulnerability management, security operations, identity protection, and incident response. In this high-impact role, you’ll partner with IT and business leaders, mentor teams on security best practices, and help build a proactive security culture across the organization.

DUTIES AND ACCOUNTABILITIES:

• Administer and optimize our Rapid7 platform (InsightVM and Managed Detection & Response) to run the enterprise vulnerability management program across on-premises, cloud, and mixed Windows/Linux environments.

• Design and maintain a risk-based vulnerability prioritization framework, incorporating asset criticality, exploitability, and business context rather than age alone.

• Lead the weekly Vulnerability Management review cadence, producing remediation metrics and driving remediation timelines to closure with IT, Infrastructure, and business stakeholders.

• Maintain and mature the organization's CIS Critical Security Controls (CIS 18) program, tracking control implementation, identifying gaps, and prioritizing remediation roadmaps.

• Own and maintain the organization's Security Incident Response Plan, and lead its execution during security incidents identified through Rapid7 MDR (e.g., credential resets, session/MFA revocation, device isolation), including documentation of root cause and resolution.

• Monitor and manage the SSL certificate lifecycle across endpoints, proactively identifying and remediating expired or soon-to-expire certificates.

• Own the Security Awareness Program, including phishing simulation and reporting (PhishAlert) and associated metrics, to build a culture of security awareness across the organization.

• Review, develop, and maintain IT and security policies, standards, and procedures (e.g., the electronic use/acceptable use policy, data protection policy, and emerging areas such as AI usage policy), in partnership with the Director of Cybersecurity & Infrastructure.

• Own Zero Trust and Conditional Access policy design within Microsoft Entra ID, including MFA policy, identity protection alerting, and least-privilege role design.

• Review privileged access requests, applying least-privilege and risk-based decision-making, and conduct periodic access reviews for sensitive systems.

• Coordinate external penetration testing and vulnerability assessment engagements; validate, triage, and integrate findings into the vulnerability management program.

• Conduct proactive threat hunting to identify potential compromises, misconfigurations, and emerging risks ahead of formal alerts.

• Evaluate and select security and business applications/software prior to deployment, including endpoint/EDR tooling, by building vendor scoping documents, leading vendor evaluation sessions, and assessing third-party/vendor security risk.

• Produce and deliver a monthly security metrics and dashboard report to leadership summarizing vulnerability management, incident, and program status.

• Partner with leadership on annual planning to identify and prioritize the coming year's security initiatives.

• Partner with and mentor IT associates on security best practices, helping to elevate the organization's overall security posture.

• Support completion of cyber insurance renewal questionnaires and audit/compliance documentation requests.

• Collaborate with Infrastructure, Legal, HR, and external partners (auditors, MSSP/vendor partners) on security initiatives, incident response, and contractual or compliance requirements.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

• Hands-on experience administering Rapid7 InsightVM and/or Rapid7 MDR, or a comparable enterprise vulnerability management/MDR platform.

• Working knowledge of security frameworks (such as CIS 18 or NIST CSF) and experience assessing or tracking control maturity.

• Experience designing and administering Zero Trust/Conditional Access policies, MFA, and identity protection within Microsoft Entra ID.

• Experience coordinating penetration tests or vulnerability assessments and translating findings into a prioritized remediation program.

• Solid understanding of infrastructure fundamentals (networking, Windows/Linux server administration, Active Directory/Entra ID) sufficient to assess risk.

• Demonstrated experience developing, reviewing, or maintaining IT and security policies, standards, and procedures.

• Incident response experience, including credential/session remediation, endpoint isolation, and clear written documentation of findings.

• Experience evaluating third-party vendors, applications, or software from a security risk perspective.

• Strong analytical and problem-solving skills, with the ability to communicate technical risk clearly to both technical and non-technical stakeholders, including in monthly leadership reporting.

• Demonstrated ability to mentor or coach colleagues on security best practices.

• Ability to work independently and manage multiple competing priorities in a fast-paced environment.

PREFERRED EDUCATION AND EXPERIENCE:

• 5+ years of experience in a dedicated cybersecurity role, ideally including vulnerability management and MDR/SIEM operations.

• One or more of the following certifications preferred: Security+, CISSP, CISM, or CCSP.

• Experience supporting compliance or regulatory requirements (e.g., cyber insurance questionnaires, data protection/privacy policy).

• Experience evaluating and scoping security tooling or vendor solutions.

PHYSICAL CAPABILITIES AND REQUIREMENTS:

• Sitting at a desk or standing at a workstation for extended periods (often 6 to 8 hours a day).

• Close visual acuity to view computer monitors, analyze data, and review security logs and technical documentation.

• Frequent use of hands, wrists, and fingers for typing, operating a mouse, and handling phone equipment.

• Ability to clearly speak, hear, and exchange information verbally and in writing with team members and stakeholders.

BENEFITS AND TOTAL REWARDS:

• Competitive wages, and opportunities for advancement.

• Medical, Dental, Vision, Critical Illness, Accident, and Flexible Spending Plans available.

• Company-paid Short/Long-term Disability, Life Insurance, and Employee Assistance plans.

• Company-paid Time-Off (PTO), Sick Leave, and Holiday Pay.

• Retirement 401(k) Plan with Discretionary Employer Match, and Profit Sharing.

• Wellness Programs, Clothing Allowance, Safety Shoes, and Safety Glasses Reimbursement.