Information Security Engineer

The Information Security Engineer role supports MACOM’s Information Security Team in administering and optimizing CrowdStrike Falcon Exposure Management. This early-career position focuses on managing exposure data, coordinating vulnerability reviews, and partnering with engineering and IT to improve prioritization, coverage, and remediation performance.

Onsite Location

Township of Hamilton, NJ (onsite)

Reporting Line

This position reports to the Manager of Vulnerability Response & BCDR.

Salary

USD 64,000 - 113,000 per yearly

Responsibilities

• Configure and maintain CrowdStrike Falcon Exposure Management, including asset groups, tags, filters, dashboards, and saved views.
• Monitor sensor and asset coverage, identify unmanaged or missing assets, and coordinate with IT to address coverage gaps.
• Tune vulnerability prioritization settings, including factors such as ExPRT.AI ratings, asset criticality, and internet exposure, to ensure risk scores match the environment.
• Maintain integrations and data flows between Falcon and other tools, including ticketing systems such as Jira / ServiceNow, and reporting workflows.
• Keep platform documentation, runbooks, and user access current, and review Falcon features and release notes.
• Run recurring vulnerability reviews with engineering, infrastructure, and IT to walk through open findings.
• Support risk-based remediation decisions that consider exploitability, asset criticality, exposure, and business context, not only CVSS.
• Track remediation progress against SLAs, follow up on overdue items, and escalate when needed.
• Validate fixes, investigate false positives, and assist with documenting and tracking risk exceptions.
• Monitor for newly disclosed, actively exploited vulnerabilities (including CISA KEV) and support rapid response with teams.
• Produce recurring metrics covering open vulnerabilities, remediation trends, SLA performance, and coverage.
• Translate technical findings into clear summaries for engineers and leadership.

Required Qualifications

• 1–3 years of experience in IT, security operations, systems administration, help desk, or a related role (internships, labs, and homelab work count).
• Working knowledge of vulnerabilities and common terminology including CVE, CVSS, patching, and misconfiguration.
• Basic administration familiarity with Windows, macOS, and Linux.
• Basic networking knowledge, including ports, protocols, DNS, and firewalls.
• Comfort using spreadsheets and dashboards to filter, sort, and summarize data.
• Clear written and verbal communication, including confidence to follow up on deadlines with teams.
• Strong organization and attention to detail when tracking many open items.

Technologies

• CrowdStrike Falcon Exposure Management
• CrowdStrike Falcon
• ExPRT.AI
• Jira
• ServiceNow
• CISA KEV
• CVE
• CVSS
• Windows
• macOS
• Linux
• Python
• PowerShell
• AWS
• Azure
• GCP

Benefits

• Health, dental, and vision insurance
• Employer-sponsored 401(k) plan
• Paid time off
• Professional development opportunities
• Restricted stock unit (RSU) awards and cash bonuses, solely at MACOM’s discretion, subject to individual and company performance

Nice to Have

• Hands-on experience with CrowdStrike Falcon, especially Exposure Management (formerly Spotlight), or similar tools such as Tenable, Qualys, or Rapid7.
• An entry-level certification such as CompTIA Security+, Network+, or a CrowdStrike Falcon certification.
• Exposure to risk-based prioritization frameworks such as EPSS, CISA KEV, or SSVC.
• Basic scripting in Python or PowerShell, or experience with APIs to automate reports or data pulls.
• Experience with ticketing systems such as Jira or ServiceNow.
• Familiarity with cloud environments such as AWS, Azure, or GCP.

What Success Looks Like

• First 90 days: Build familiarity with the environment and the Falcon Exposure Management console, including the ability to answer most day-to-day questions independently. Review asset coverage, improve tagging and asset groups, and begin running vulnerability reviews with multiple teams.
• First year: Become a go-to partner for vulnerability questions. Coverage gaps are documented and decreasing, reporting runs on a regular cadence, and remediation within SLA improves measurably versus the starting point.