The Cyber Security Engineer reports directly to the Cyber Security Engineering Principal for Hologic and has responsibility for the integration and development of processes, tools, technologies, and security service offerings. This individual will leverage leading-edge technologies, and innovative approaches to position Hologic for measurable success, improving efficiency, increasing security posture, supporting aggressive growth and improving the Security Operations program overall.
We are looking for someone with subject matter expertise in log management, orchestration and automation, application security, vulnerability management, API development/integration, SIEM content development (dashboards, reports, metrics, use cases, etc.), threat intelligence, exploit testing/control validation, Privilege Access Management (PAM), Email Security, SASE/SSE, Active Directory Security, and Okta Engineering experience.
This is a highly visible role. The right candidate will be collaborating with internal and external team members. Therefore, must have excellent engagement and communication skills and must have a strong customer-focused, team-oriented, approach that balances security needs and user experience to provide best-in-class security to the organization.

Education:
• Bachelor’s degree
Experience:
• 3-5 Years of experience in Information Security
Skills, Specialized Knowledge:
• CISSP Certification
• Experience engineering, implementing and administering Splunk, Splunk Enterprise Security, creating Splunk Content, dashboards, use cases, and reports.
• Experience implementing vulnerability management solutions.
• Experience maintaining PAM program.
• Experience with Windows and Linux.
• Experience Securing Active Directory.

Qualifications:
• Strong communication skills including the ability to influence others, including proven ability to build strong relationships with leadership, IT staff and peers
• Splunk training/certification
• SANS Certifications are a plus
• Experience building an application security program
• Understanding of DevOps and SSDLC Principles
• CISA or CISM certification
• Knowledge of Active Directory/Azure AD, Azure, AWS, OR GCP
• Knowledge of Okta
• Knowledge of, or experience with threat intelligence platforms and practices
• Ability to document requirements and enhance existing processes
• Experience building and integrating Crowdstrike Falcon Platform
• Experience scripting with Bash, Powershell, and/or Python
• Penetration testing and threat modeling experience is a plus

Summary of Duties and Responsibilities
• Defining and developing cybersecurity requirements, design and architecture artifacts, strategy, plans, and policies
• Defining cyber design solutions, providing guidance and direction related to security technologies
• Performing analysis on cybersecurity collected data and test results
• Performing and/or providing guidance and oversight on vulnerability assessments
• Identifying and implementing cybersecurity design and preparing and maintaining engineering and security related documentation.
• Collaborating with program and engineering disciplines and ensuring cybersecurity solution alternatives
• Run maturity assessments and validate controls on various security platforms to identify improvements and develop product roadmaps
• Function as a technical security advisor for infrastructure and other engineering disciplines to help reduce risk and minimize the attack surface
• Conducting technical and nontechnical trade studies, analysis, and reviews
• Have excellent verbal and written communication skills and be comfortable presenting to different levels within and outside of the organization