Sr. Engineer Cyber Security

Overview

The Senior Cyber Security Engineer at Doble Engineering will leverage Cyber Security related technical skills across various security initiatives while collaborating with IT, engineering, and product teams. This highly visible role will require the person to stay on top of the latest security issues and technologies shaping the industry. This role will have exposure to emerging trends in areas like Cloud, AI Security, and Critical Infrastructure Protection.

Our environment provides opportunities to translate security concepts into functioning solutions through collaborations with various engineering teams. This position will be located at Doble’s Marlborough facility and will report directly to the Cyber Security Manager.

• Support Doble Cybersecurity Solutions including performing weekly patch management process, maintain NERC CIP compliance and SLAs, weekly customer calls, and contribute to sustaining the product enhancement.
• Lead security activities within the SDLC including Code Reviews, Threat Modeling, SAST, DAST, & SCA.
• Lead Penetration Testing on Doble products such as Web, Thick, and API applications.
• Conduct periodic security reviews to evaluate the effectiveness of existing security measures.
• Collaborate with internal and external stakeholders to ensure technology solutions meet security requirements.
• Serve as a Subject Matter Expert (SME) for Cyber Security for other Departments queries, recommendations and needs.
• Coordinate with different teams within the organization to ensure software, hardware and network security.
• Respond to and mitigate incidents and security threats, performing digital forensics and incident response when necessary.
• Maintain Cybersecurity policies, standards, and procedures.
• Develop training and guidance materials on security awareness and best practices to other personnel.
• Staying up to date with the latest security threats and trends.
• Manage and/or contribute to additional security projects and tasks as needed.
• Ability to prototype and implement new security tools and technologies.

• Bachelor’s degree in Cybersecurity, Computer Science, or related field

• 5+ years of experience as a security engineer or equivalent
• In-depth understanding of the NIST framework based on practical experience and functional knowledge of security standards such as NERC CIP, ISO 27001, IEC 62443.
• Solid understanding of the OWASP Top 10, OWASP ASVS, and other security frameworks.
• Proven cyber security experience with Firewall, Cloud, and SIEM tools (e.g., Azure, Secureworks MDR, Synk, Fortinet, KnowBe4, Bit Sight).
• Expert with manual vulnerability testing, exploit development, and static code analysis, using tools like Burp Suite, OWASP ZAP, Metasploit, SQLMap, etc.
• Excellent analytical and problem-solving skills.
• High level of attention to detail and quality of work product.
• Ability to work independently with minimal oversight and within a team environment.
• Strong organizational skills; ability to accomplish multiple tasks within the agreed upon time frames in a fast-paced environment.
• Strong written and oral communication skills, including the ability to present ideas clearly and effectively.
• Good judgment, sense of urgency, and commitment to high standards of ethics and regulatory compliance.

• Master’s degree in Cybersecurity, Computer Science or related technical discipline
• 5+ years of experience in a security engineer or related role
• 2-5 years of hands-on penetration testing experience
• 2-5 years of experience using endpoint security tools to investigate
• Operational experience with incident response, vulnerability management, network and security monitoring
• Certifications such as CISSP, OSCP, OSCE, GPEN, CEH, Azure, Security+
• Demonstrated enthusiasm for Information Security (e.g. Git Hub, blogs, talks, SANS/Hacker One/Hack The Box )
• Ability to lead and mentor security team members
• Knowledge of AI security and generative AI systems
• Knowledge of various security and risk assessment tools
• Familiarity with networking protocols and components
• Ability to clearly explain complex security issues to leadership
• Familiar it…