Sr Cybersecurity Engineer

BUILD A BETTER CAREER WITH MSC

Serving customers and our community starts with the best people doing their best work. That is precisely what we have created at MSC Industrial Supply Co. We are a leading North American distributor of metalworking and maintenance, repair, and operations (MRO), products and services. We offer more than 2 million products and have over 80 years of experience across dozens of industries. We aim to execute our Built to Make You Better brand promise for all our stakeholders, including our associates.

Requisition ID : 21835

Employment Type : Full Time

Job Category : Digital/IT

Work Location : Davidson, NC

BRIEF POSITION SUMMARY:

The Senior Cybersecurity Engineer is a senior technical contributor responsible for designing, implementing, operating, and continuously improving enterprise cybersecurity controls across endpoint, network, cloud, identity, application, email, and data-protection environments.

This hands-on role engineers and integrates security platforms, translates security architecture and risk requirements into reliable technical solutions, and partners with Infrastructure, Security Architecture, GRC, DevSecOps, IAM, Application Development, Audit, Compliance, and business stakeholders to reduce cyber risk and improve operational resilience.

The Senior Cybersecurity Engineer serves as a technical escalation point for complex security issues, drives incident response and threat-informed control improvements, develops automation and repeatable engineering practices, and maintains the documentation and evidence necessary for effective operations and audit readiness.

DUTIES AND RESPONSIBILITIES

Design, implement, configure, integrate, and support enterprise cybersecurity technologies across endpoint security, network security, cloud security, identity security, email security, vulnerability management, data protection, logging, monitoring, and security automation.

Translate security architecture, policies, standards, risk findings, regulatory obligations, and business requirements into practical technical designs, implementation plans, and operational controls.

Engineer and maintain integrations among security platforms, infrastructure services, cloud environments, identity providers, enterprise applications, ticketing systems, and monitoring platforms using supported APIs, connectors, and automation.

Lead technical implementation activities for cybersecurity projects, including requirements definition, design review, configuration, testing, deployment, validation, documentation, operational transition, and post-implementation improvement.

Assess the security of network, endpoint, cloud, application, identity, and data flows; identify control gaps and design risk-based remediation or compensating controls.

Configure and validate security controls supporting least privilege, segmentation, secure access, threat prevention, detection, logging, vulnerability reduction, secure configuration, and data protection.

Improve prevention, telemetry, detection coverage, investigation workflows, containment capabilities, and response automation based on incidents, threat intelligence, attack techniques, and control testing.

Provide senior-level troubleshooting and root-cause analysis for complex security platform failures, integration issues, control gaps, access problems, performance concerns, and cybersecurity incidents.

Leads the technical response for escalated cybersecurity incidents

Develop scripts, queries, dashboards, workflows, and automation to reduce manual work, improve control reliability, accelerate investigation and remediation, and provide measurable operational outcomes.

Perform technical security assessments, design reviews, configuration reviews, control validation, and risk analysis for new and existing technology solutions.

Support vulnerability management by validating exposure, prioritizing remediation, partnering with technology owners, evaluating exceptions, and confirming corrective actions.

Maintain security platform health, lifecycle plans, upgrade paths, licensing awareness, capacity requirements, vendor relationships, and service-level performance.

Create and maintain architecture diagrams, technical standards, implementation procedures, operational runbooks, support guides, control evidence, knowledge articles, and recovery procedures.

Collect technical evidence and support internal audit, external audit, customer, regulatory, and compliance activities involving cybersecurity controls.

Mentor administrators and analysts, lead technical knowledge transfer, promote consistent engineering, documentation, testing, and change-management practices.

Participate in an on-call or after-hours escalation rotation as needed to support security incidents, critical vulnerabilities, maintenance, or service restoration.

Foster the MSC Culture in the department and throughout the company to ensure fulfillment of MSC's vision and unity of purpose.

Participate in special projects and perform additional duties as required.

QUALIFICATIONS

What You Need:

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related field, or an equivalent combination of education and relevant professional experience.

Minimum of seven years of hands-on cybersecurity experience in one or more functional security domains; or a minimum of two years in a dedicated cybersecurity function combined with six or more years of hands-on infrastructure experience.

Demonstrated hands-on experience designing, implementing, integrating, and supporting enterprise cybersecurity technologies in complex hybrid enterprise environments.

Strong experience in at least three of the following domains: endpoint security; network security; cloud security; identity and access management; email security; vulnerability management; SIEM and security analytics; data protection; application or API security; security automation.

Experience performing technical security assessments, design reviews, control validation, troubleshooting, and root-cause analysis.

Experience supporting security incidents, threat investigations, containment, recovery, or post-incident control improvements.

Experience with scripting, automation, APIs, or query languages such as PowerShell, Python, REST, JSON, KQL, SQL, or equivalent technologies.

Working knowledge of enterprise authentication, authorization, encryption, certificate, logging, network, cloud, and secure configuration concepts.

Working knowledge of security frameworks and compliance obligations such as NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOX, PCI DSS, CMMC, or related requirements.

Ability to create clear technical documentation, architecture diagrams, implementation plans, operational runbooks, and audit evidence.

Strong analytical, troubleshooting, prioritization, communication, collaboration, and stakeholder-management skills.

Ability to independently manage multiple complex initiatives, work effectively under pressure, and critically challenge proposed designs or processes when warranted.

Bonus Points If You Have:

Hands-on experience with Microsoft security and identity platforms, CrowdStrike, Sumo Logic, Cato Networks, Wiz, CyberArk, Saviynt, ServiceNow, or comparable enterprise technologies.

Experience securing Microsoft 365, Azure, AWS, GCP, SaaS, containers, APIs, CI/CD pipelines, infrastructure as code, or hybrid enterprise environments.

Experience using threat modeling, adversary techniques, attack-path analysis, purple teaming, control testing, or detection engineering to improve security design and coverage.

Experience in a regulated industry or an environment subject to formal security, privacy, contractual, or audit obligations.

One or more relevant certifications such as CISSP, CCSP, GCIH, GCIA, GCED, OSCP, Security+, Microsoft security certifications, cloud security certifications, or equivalent technical credentials.

Master's degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field.

Other Requirements:

Position requires up to 5% of travel

This position will require access to International Traffic in Arms Regulations Information (“ITAR”) and/or Controlled Unclassified Information (“CUI”)

• INDICATES ESSENTIAL DUTIES

To perform this job successfully an associate must be able to perform each essential duty satisfactorily. The requirements listed below are representative of knowledge, experience level and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

Compensation starting at $109,500 - $172,040 depending on candidate location and experience.

The salary range represented is based on similar roles in comparable industries, and the cost of labor in respective cities. Actual compensation is based on the candidate’s relevant experience, education requirements and peer pay equity. The Company reserves the right to modify the range as market conditions change.

Applicants must be currently authorized to work in the United States. We are unable to sponsor or take over sponsorship of an employment Visa for this position at this time.

This job posting will remain open for a minimum of 3 business days from the original posting date or longer as needed to fill the position.

WHY MSC?

People. Collaboration. Insight. That’s how you build something that works. Built on a foundation of trust, MSC works side by side with our customers to help them drive business results. With more than one million product offerings and 80+ years of experience across industries, MSC strives to help our customers achieve greater productivity, profitability, and growth through inventory management and other innovative supply chain solutions. We care about our associates and have programs in place to help our 6,500+ team members achieve their potential.

OUR COMMITMENT TO YOU

Our associates are our top priority and investing in their well-being is one way we execute our Built to Make You Better brand promise. Alongside competitive pay, we have a comprehensive benefits program to support you and your family's health, well-being and financial future. We offer dynamic healthcare plans, generous 401K and stock purchasing programs, tuition reimbursement opportunities, and paid time away for holidays, vacations, and illness. Visit our page for a better look at our extensive benefits: Your Future Benefits.

You will also have the opportunity to join our Associate Inclusion Circles: Women, Pride, Black, Generational, Veterans, HOLA, and Able. These circles are open to all associates and are designed to promote awareness, collaboration, and respect.

EQUAL EMPLOYMENT OPPORTUNITY STATEMENT

At MSC, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all qualified applicants and our associates without regard to race, color, religion, age, sex, national origin, disability, protected veteran status, sexual orientation or any category protected by applicable law. Accommodation requests can be made at any stage of the recruitment process; applicants are asked to make their needs/requirements known.

Please note that MSC uses electronic monitoring and system logs in its workplace, including monitoring of Company-provided systems and collaboration tools, as permitted by applicable law.