Senior Principal, Cybersecurity Systems and Operations (Hybrid)

A Day in Your Life at MKS

As a Senior Principal member of the MKS Cybersecurity Systems and Operations team, you will support a broad range of security activities including execution, management, and monitoring of security controls. Your contributions in this critical role include vulnerability management, endpoint security, email security, administration of various security tools and systems, in addition to proactively researching and analyzing the various controls for continuous improvement. You will ensure systems are adequately protected, effectively monitored, and in compliance with corporate policies to continually support and improve the controls and security posture within our IT environment. This includes, but not limited to, troubleshooting of the security infrastructure, supporting monitoring tools and to engage with business and other IT functions to understand use cases, to deploy and maintain appropriate security tools/solutions. You must understand the high-level principles of cybersecurity, and can effectively articulate security requirements, initiatives, progress, challenges, and success factors.

This position is Hybrid and candidate must be within commutable distance to one of our facilities in Andover MA, Beaverton OR, Broomfield CO, Irvine CA, Milpitas CA, or Rochester NY.

You Will Make an Impact By:

• Monitor and analyze security vulnerabilities to report risk and trends, develop remediation plans with the responsible parties and report status of remediation activities.
• Manage cybersecurity system configuration activities including updates and ruleset development in coordination with both internal and third party/managed security services providers.
• Develop and maintain use cases, rules, and alerts to detect security incidents across various security technologies.
• Conduct regular tuning and optimization of the various cybersecurity systems to improve detection capabilities.
• Support investigation and response to security incidents, providing detailed analysis and recommendations related to cybersecurity tools/systems.
• Stay updated on the latest cybersecurity threats, trends, and technologies.
• Provide guidance and training to junior team members on best practices and operational functions.

Skills You Bring:

• Degree in relevant field or a significant combination of technical certifications and direct experience
• One or more professional security related certifications (e.g., CISSP, CEH, CISA, GIAC, GSIP, GCIH, GCFE)
• 10+ years of relevant Information Technology or Cyber Security experience
• Expert knowledge of security vulnerabilities, threats, and risk mitigation activities for IT infrastructure, security devices, applications, systems and endpoints
• Direct experience supporting SIEM, EDR, Vulnerability Management, and Email Security technologies
• Knowledge of networking protocols and hardware configuration (switches, routers, firewalls, wireless controllers, etc.)
• Ability to analyze security information and data from multiple systems and sources
• Basic project planning and management skills to complete projects and activities within established goals
• Ability to work effectively with vendors, staff, management and end users at all knowledge levels
• Experience supporting global environments
• Excellent written, verbal and collaboration skills
• Strong analytical and problem-solving skills
• Ability to work independently and as part of a team
• Strong attention to detail and organizational skills

Preferred Skills

• Network security control experience including IPSEC VPN gateways, layer 3-7 next generation firewalls, web filters, IPS, IDS, ACLs, DLP, etc.
• Security Information and Event Management (SIEM) administration and rule development
• Cloud computing security architecture and controls
• Network architecture/design (LAN, WAN, VLAN, MPLS, etc.)
• Remote access methods and controls
• Identity and Access Management (IAM)
• Multifactor authentication experience
• Encryption and certificate/key management
• Experience with Linux operating systems
• ERP experience (Oracle, SAP)
• Experience with scripting and automation (e.g., Python, PowerShell).
• Experience with US Federal information technology and cyber security standards including NIST 800-171

Competencies

• Communication: Effectively communicate with a variety of technical and non-technicalaudiences and tune messages appropriately
• Collaboration: Ability to work independently and effectively as part of a multidisciplinary team
• Proficient in multitasking: Effectively handle various responsibilities, prioritize tasks, andmaintain awareness of upcoming work.
• Attention to Detail: Work with accuracy and be thorough.
• Create detailed ChangeManagement documentation and implementation plans.
• Adaptability: Capacity to rapidly grasp and adapt to new technologies and solutions.
• Customer Focus: Maintain focus on providing customers with secure networking solutionswith excellent value.
• Team Focus: Foster an innovation environment, team compatibility, positive workculture, and excellence. Manage relationships within the project team, clients, andrelevant stakeholders.

Compensation and Benefits:

Salary Pay Range: $170k - $180k per year. This range is a good faith estimate of the expected salary range for this position, based on a wide range of factors including qualifications, experience and training, operational and business needs and other considerations permitted by law.

Bonus: This position is eligible for a discretionary annual bonus, in an amount to be determined by MKS [or as applicable].

Benefits: MKS offers a comprehensive benefits package, including health insurance coverage (medical, dental and vision), 401(k) with company match, life and disability insurance, 12 paid holidays, sick time, 15 paid vacation days, [6 weeks fully paid] parental leave, adoption assistance and tuition reimbursement [and for participation in any stock programs, signing bonus, etc.].

This position is Hybrid and candidate must be within commutable distance to one of our facilities in Andover MA, Beaverton OR, Broomfield CO, Irvine CA, Milpitas CA, or Rochester NY.

Relocation benefits are not available for this position.

We are interested in a qualified candidate who is eligible to work in the United States. However, we will not be sponsoring work visas for this position, at this time.

MKS is an equal opportunity employer, including disability, veteran status and all categories protected by law. Please review our EOE statements for additional details. MKS is generally only hiring candidates who reside in states where we are registered to do business.

MKS will consider qualified applicants with a criminal history pursuant to the California Fair Chance Act and the Los Angeles County Fair Chance Ordinance for Employers.

#LI-MH1 #LI-Hybrid

Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to the International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR). Applicants for these positions may need to be "U.S. persons." "U.S. persons" are generally defined as U.S. citizens, noncitizen nationals, lawful permanent residents (or, green card holders), individuals granted asylum, and individuals admitted as refugees.

MKS Instruments, Inc. and its affiliates and subsidiaries ("MKS") is an affirmative action and equal opportunity employer: diverse candidates are encouraged to apply. We win as a team and are committed to recruiting and hiring qualified applicants regardless of race, color, national origin, sex (including pregnancy and pregnancy-related conditions), religion, age, ancestry, physical or mental disability or handicap, marital status, membership in the uniformed services, veteran status, sexual orientation, gender identity or expression, genetic information, or any other category protected by applicable law. Hiring decisions are based on merit, qualifications and business needs. We conduct background checks and drug screens, in accordance with applicable law and company policies. MKS is generally only hiring candidates who reside in states where we are registered to do business.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

MKS is committed to working with and providing reasonable accommodations to qualified individuals with disabilities. If you need a reasonable accommodation during the application or interview process due to a disability, please contact us at:accommodationsatMKS@mksinst.com .

If applying for a specific job, please include the requisition number (ex: RXXXX), the title and location of the role