Senior IT Security Engineer

Supernus Pharmaceuticals Inc is hiring a Senior IT Security Engineer to architect, operate, and mature enterprise security controls that protect systems, data, and users.

Responsibilities

• Operate, tune, and integrate security platforms including CrowdStrike, Zscaler, Microsoft Defender, Microsoft Endpoint Manager, Tenable, Office 365, Azure AD, and associated logging solutions to maintain enterprise-wide situational awareness.
• Own triage and investigation of security alerts originating from the external Security Operations Center (SOC), distinguishing false positives from true incidents.
• Coordinate and, when needed, lead incident response for events impacting confidentiality, integrity, or availability; escalate to IT Leadership with impact, risk, and recommended remediation.
• Develop, review, and maintain IT security policies, standards, procedures, and technical control documentation aligned with industry best practices and regulatory requirements.
• Oversee vulnerability management including analysis, prioritization, and tracking remediation across endpoints, servers, applications, and cloud workloads; partner with infrastructure and application teams to drive timely closure.
• Analyze suspicious emails by ensuring accurate classification, supporting metrics and reporting, and communicating findings and preventive guidance to users.
• Drive the use of the Supernus KnowBe4 platform to plan and deploy ongoing security and privacy training, phishing simulations, and awareness campaigns; provide feedback on effectiveness.
• Establish and maintain secure configurations and patching standards; ensure critical security updates are evaluated, tested, and deployed rapidly.
• Monitor cybersecurity intelligence feeds, news, and threat actor TTPs; translate threat information into actionable recommendations for Supernus.
• Synthesize and communicate the impact of security bulletins and publicly disclosed vulnerabilities; advise leadership and technical teams on risk and mitigations.
• Partner with extended IT teams to embed security by design into new systems, cloud initiatives, and modernization efforts for legacy platforms, providing guidance on secure architectures and patterns.
• Lead or support technical post-incident reviews, root cause analysis, and lessons learned; ensure corrective actions are identified, tracked, and implemented.
• Champion and enforce security policies, procedures, and least-privilege access control standards across IT and business units to support audit and compliance activities.
• Evaluate and recommend emerging security technologies, services, and standards; build business cases where appropriate and help plan security roadmap enhancements.
• Collaborate cross-functionally (infrastructure, application development, data, compliance, and business stakeholders) to design and deliver security solutions that enable business outcomes while managing risk.
• Mentor, coach, and provide technical direction to other IT staff to foster continuous improvement and knowledge sharing.
• Other responsibilities and projects as assigned.

Requirements

• Bachelor’s degree in cyber/IT Security, Computer Science, Computer Engineering, or related field required.
• 12+ years of progressive experience in IT security and system administration, including considerable experience in enterprise security engineering and operations.
• Microsoft Security, Certified Information Systems Security Professional (CISSP), or similar certifications highly preferred.
• Proven ability implementing, managing, and optimizing security software systems and products in complex environments.
• Deep knowledge of system and software management best practices with demonstrated troubleshooting and resolution of complex security and infrastructure issues.
• Strong understanding of Security Operations Center processes including monitoring, incident handling, and escalation.
• Demonstrated knowledge of data privacy and protection practices and relevant regulatory expectations.
• Advanced working knowledge of security technologies including SIEM, intrusion detection/prevention, endpoint protection, web proxy/content filtering, Active Directory, PKI, RADIUS, and log analysis.
• Ability to work independently and as part of a team while maintaining high ethical standards of integrity and quality.
• Ability to take an innovative and dynamic approach to work.
• Self-starter comfortable working independently and in a team environment.
• Ability to consistently exhibit Supernus Values in interactions with employees, vendors, customers, and others.
• Authorized to legally work in the United States without visa sponsorship.
• Capable of performing other duties as assigned by Management.

Technologies

• CrowdStrike
• Zscaler
• Microsoft Defender
• Microsoft Endpoint Manager
• Tenable
• Office 365
• Azure AD
• Logging solutions
• Supernus KnowBe4 platform
• SIEM
• Intrusion detection/prevention
• Endpoint protection
• Web proxy/content filtering
• Active Directory
• PKI
• RADIUS
• Log analysis

Benefits

• Health
• Dental
• Vision
• Paid time off
• 401k company match
• Company-paid life insurance
• Health and wellness benefits
• Stock equity awards
• Employee stock purchase programs
• Participation in the Company’s discretionary annual bonus program

Work Environment / Physical Requirements / Travel

• Lifting requirements: exerting up to 35 pounds of force occasionally, up to 10 pounds of force frequently, and negligible force regularly to move objects.
• Close visual acuity required for preparing and analyzing data, transcribing, viewing a computer terminal, and extensive reading.
• Not substantially exposed to adverse environmental conditions.
• Travel to Supernus HQ as needed for meetings, projects, and other business activities.

Compensation

• Expected salary range: $160,000 to $190,000 per year for fully qualified candidates.
• Total compensation includes other elements such as stock equity awards, employee stock purchase programs, and participation in the Company’s discretionary annual bonus program.

Location: Rockville, MD (onsite)

Experience: 12+ years

Salary: USD 160,000 - 190,000 per yearly