Sr Cybersecurity Engineer

MSC Industrial Supply Co. is seeking a senior cybersecurity engineer to design, implement, operate, and continuously improve enterprise security controls across a wide range of environments. This is an onsite role based in Davidson, NC, with ownership spanning endpoint, network, cloud, identity, applications, email, and data protection, alongside hands-on engineering of security platforms and integrations.

The role also translates security requirements into practical technical solutions, supports escalation and incident response, and strengthens prevention and detection capabilities using threat-informed control improvements.

Key Responsibilities

• Design, implement, configure, integrate, and support enterprise cybersecurity technologies across endpoint security, network security, cloud security, identity security, email security, vulnerability management, data protection, logging, monitoring, and security automation.
• Translate security architecture, policies, standards, risk findings, regulatory obligations, and business requirements into technical designs, implementation plans, and operational controls.
• Engineer and maintain integrations among security platforms, infrastructure services, cloud environments, identity providers, enterprise applications, ticketing systems, and monitoring platforms using supported APIs, connectors, and automation.
• Lead technical implementation activities for cybersecurity projects, including requirements definition, design review, configuration, testing, deployment, validation, documentation, operational transition, and post-implementation improvement.
• Assess security of network, endpoint, cloud, application, identity, and data flows, identify control gaps, and design risk-based remediation or compensating controls.
• Configure and validate security controls aligned to least privilege, segmentation, secure access, threat prevention, detection, logging, vulnerability reduction, secure configuration, and data protection.
• Improve prevention, telemetry, detection coverage, investigation workflows, containment capabilities, and response automation based on incidents, threat intelligence, attack techniques, and control testing.
• Provide senior-level troubleshooting and root-cause analysis for complex security platform failures, integration issues, control gaps, access problems, performance concerns, and cybersecurity incidents.
• Lead the technical response for escalated cybersecurity incidents.
• Develop scripts, queries, dashboards, workflows, and automation to reduce manual work, improve control reliability, accelerate investigation and remediation, and support measurable outcomes.
• Perform technical security assessments, design reviews, configuration reviews, control validation, and risk analysis for new and existing technology solutions.
• Support vulnerability management by validating exposure, prioritizing remediation, partnering with technology owners, evaluating exceptions, and confirming corrective actions.
• Maintain security platform health, lifecycle plans, upgrade paths, licensing awareness, capacity requirements, vendor relationships, and service-level performance.
• Create and maintain architecture diagrams, technical standards, implementation procedures, operational runbooks, support guides, control evidence, knowledge articles, and recovery procedures.
• Collect technical evidence to support internal audit, external audit, customer, regulatory, and compliance activities involving cybersecurity controls.
• Mentor administrators and analysts, lead technical knowledge transfer, and promote consistent engineering, documentation, testing, and change-management practices.
• Participate in an on-call or after-hours escalation rotation as needed for incidents, critical vulnerabilities, maintenance, or service restoration.
• Foster the MSC Culture in the department and throughout the company to support MSC’s vision and unity of purpose.
• Participate in special projects and perform additional duties as required.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related field, or an equivalent combination of education and relevant professional experience.
• Minimum of seven years of hands-on cybersecurity experience in one or more functional security domains, or a minimum of two years in a dedicated cybersecurity function combined with six or more years of hands-on infrastructure experience.
• Demonstrated hands-on experience designing, implementing, integrating, and supporting enterprise cybersecurity technologies in complex hybrid enterprise environments.
• Strong experience in at least three of: endpoint security; network security; cloud security; identity and access management; email security; vulnerability management; SIEM and security analytics; data protection; application or API security; security automation.
• Experience performing technical security assessments, design reviews, control validation, troubleshooting, and root-cause analysis.
• Experience supporting security incidents, threat investigations, containment, recovery, or post-incident control improvements.
• Experience with scripting, automation, APIs, or query languages such as PowerShell, Python, REST, JSON, KQL, SQL, or equivalent technologies.
• Working knowledge of enterprise authentication, authorization, encryption, certificate, logging, network, cloud, and secure configuration concepts.
• Working knowledge of security frameworks and compliance obligations including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOX, PCI DSS, CMMC, or related requirements.
• Ability to create clear technical documentation, architecture diagrams, implementation plans, operational runbooks, and audit evidence.
• Strong analytical, troubleshooting, prioritization, communication, collaboration, and stakeholder-management skills.
• Ability to independently manage multiple complex initiatives, work under pressure, and critically challenge proposed designs or processes when warranted.

Technologies

• PowerShell, Python, REST, JSON, KQL, SQL
• NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOX, PCI DSS, CMMC

Benefits

• Dynamic healthcare plans
• Generous 401K and stock purchasing programs
• Tuition reimbursement opportunities
• Paid time away for holidays, vacations, and illness
• Associate Inclusion Circles: Women, Pride, Black, Generational, Veterans, HOLA, and Able

Bonus Points If You Have

• Hands-on experience with Microsoft security and identity platforms, CrowdStrike, Sumo Logic, Cato Networks, Wiz, CyberArk, Saviynt, ServiceNow, or comparable enterprise technologies.
• Experience securing Microsoft 365, Azure, AWS, GCP, SaaS, containers, APIs, CI/CD pipelines, infrastructure as code, or hybrid enterprise environments.
• Experience using threat modeling, adversary techniques, attack-path analysis, purple teaming, control testing, or detection engineering to improve security design and coverage.
• Experience in a regulated industry or an environment subject to formal security, privacy, contractual, or audit obligations.
• One or more relevant certifications such as CISSP, CCSP, GCIH, GCIA, GCED, OSCP, Security+, Microsoft security certifications, cloud security certifications, or equivalent technical credentials.
• Master’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field.

Additional Information

• Location: Davidson, NC (onsite)
• Salary: USD 109,500 - 172,040 per year
• Travel: Up to 5%
• Access requirements: Requires access to International Traffic in Arms Regulations Information (“ITAR”) and/or Controlled Unclassified Information (“CUI”)
• Work authorization: Applicants must be currently authorized to work in the United States; sponsorship is not available
• Posting timeline: This job posting will remain open for a minimum of 3 business days from the original posting date or longer as needed