The Cybersecurity team at Grace is seeking to hire a versatile and highly motivated Cybersecurity Engineer to join our global team. The ideal candidate will be a self-starter who can work collaboratively in a team environment, possess exceptional problem-solving skills, attention to detail, and refined communication skills. This position is located at our corporate headquarters in Columbia, MD with a hybrid work schedule. Mondays, Wednesdays and Thursdays are required in-office and Tuesdays and Fridays may be remote.

Reporting to the WR Grace Deputy CISO, the Cybersecurity Engineer will play an important role as part of our cybersecurity program by supporting the deployment of security solutions and enforcing security standards for both the IT and OT (operational technology) environments. As a key technical resource, you will be a critical contributor to an overarching enterprise security strategy working closely with IT infrastructure and OT engineers to execute initiatives in alignment with the strategic cybersecurity vision.

• Promote the use of new technologies, security architectures, and products that will support security requirements as prescribed by approved Cybersecurity Architectures, Standards and Guidelines.
• Serve as a technical resource for all enterprise security solutions, including but not limited to the following technologies: Endpoint Detection and Response (EDR), Endpoint Management, Privileged Access Management (PAM), Identity and Access Management (IAM), Vulnerability Management, Cloud Security Posture Management (CSPM), Secure Access Service Edge (SASE, Firewalls).
• Support IT technical services staff to evaluate, select, install or configure hardware and software systems that provide appropriate security functions
• Assist with cybersecurity architecture reviews of IT infrastructure and solutions.
• Assist in responses to external audits, penetration tests and vulnerability assessments.
• Recommend the application of controls, fixes, patches, and disaster recovery procedures.

• Bachelor's degree in Cybersecurity, Computer Science or Engineering or similar with 2 years of professional IT experience
• OR in lieu of degree, aminimum of 7 years of combined IT and Security work experience, with a broad exposure to network infrastructures and multi-platform environments.

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentials preferred but not required.
• Basic understanding of cybersecurity frameworks for IT and OT environments.
• Knowledge and understanding of information risk assessment concepts and principles in relation to risk appetite, risk tolerance, and business risk exposure
• Excellent interpersonal skills with the ability to translate technical subjects to non-technical audiences.
• Knowledge of Manufacturing (ICS/OT) network communication protocols, industrial networking topologies is beneficial, but not required.
• Understanding of cybersecurity frameworks and guidelines such as those developed by NIST, CISA, CIS, CSA, ISO and MITRE ATT&CK.
• Ability to interface with internal customers at all levels of the organization
• Be creative and intellectually curious and not afraid to immerse yourself in technical documentation
• Be highly collaborative and consultative
• Have a passion for all things security

• Medical, Dental, Vision Insurance
• Life Insurance and Disability
• Grace Wellness Program
• Flexible Workplace
• Retirement Plans
• 401(k) Company Match - Dollar to dollar up to the first 6%
• Paid Vacation and Holidays
• Parental Leave (salaried only)
• Tuition Reimbursement