About the Role
JMARK is looking for a Security Product Engineer to join our team and help protect both JMARK and our clients from evolving cybersecurity threats.
This is a hands-on technical security role for someone who enjoys digging into security incidents, vulnerabilities, infrastructure, and security tools while also helping others understand how to improve their security posture. You do not necessarily need to have spent your entire career with "Cybersecurity" in your job title. Some of our most successful security professionals have come from strong server, systems, or network infrastructure backgrounds and developed a security-first mindset along the way.
The Security Product Engineer will serve as a technical security subject matter expert and escalation resource across JMARK. You will help manage security incidents, vulnerability and patch management processes, security platforms, and network security technologies while working closely with our Service, Proactive, Product Management, and other technical teams.
You will also have the opportunity to evaluate and improve security products, processes, configurations, and standards that directly reduce risk for JMARK and our clients.
What You Will Do
In this role, you will:
- Serve as a technical escalation point for security alerts, incidents, vulnerabilities, and security products.
- Participate in and help coordinate incident response activities for both client and internal security incidents, including investigation, containment, remediation, documentation, and post-incident review.
- Help manage vulnerability and patch management processes, including identifying vulnerabilities, prioritizing remediation efforts, tracking progress, and verifying completion.
- Monitor emerging threats and vulnerabilities and help determine the appropriate response or remediation.
- Administer, maintain, tune, and improve security tools and platforms.
- Work with SIEM and other security monitoring technologies to investigate alerts, identify suspicious activity, and improve detection capabilities.
- Assist with the evaluation, implementation, configuration, and ongoing management of new and existing security products.
- Provide technical guidance related to network security, firewalls, switching, segmentation, and secure network design.
- Assist with Cisco networking and security technologies, including switching and Cisco firewall environments such as FMC and FTD.
- Provide primary or secondary administration for security and network infrastructure systems as needed.
- Track security initiatives, vulnerabilities, remediation items, findings, and deliverables through completion.
- Identify opportunities to strengthen security controls, improve processes, reduce risk, and prevent recurring incidents.
- Collaborate with technical teams to make security practical and effective rather than simply checking a box.
- Help strengthen JMARK's security culture through education, technical guidance, and a security-first mindset.
What We Are Looking For
We are looking for someone with a strong technical foundation who understands how infrastructure and cybersecurity work together.
Ideal candidates will have experience in several of the following areas:
- Cybersecurity operations, engineering, administration, or incident response.
- Server or systems infrastructure with significant responsibility for security, vulnerability management, or patch management.
- Network infrastructure and network security.
- Cisco switching and networking technologies.
- Cisco firewall technologies, particularly Firepower Management Center and Firepower Threat Defense.
- Security incident investigation, response, remediation, and post-incident analysis.
- Vulnerability management and remediation.
- Patch management processes and technologies.
- SIEM platforms, security monitoring, alert investigation, and log analysis.
- Endpoint security, EDR, MDR, or similar security technologies.
- Firewall administration and secure network configuration.
- Threat and vulnerability research.
- Security best practices, risk management, and common attack techniques.
- Working with multiple technical teams to drive remediation efforts through completion.
Experience working within a managed services provider or supporting multiple client environments would be particularly valuable.
What Will Help You Stand Out
While we do not expect one person to check every box, the following would be beneficial:
- Previous experience in a dedicated cybersecurity role.
- Strong server infrastructure experience combined with demonstrated security responsibilities.
- Experience owning or coordinating vulnerability and patch management programs.
- Experience serving as an incident lead or incident manager during cybersecurity events.
- Hands-on experience with Cisco FMC/FTD.
- Strong Cisco switching and networking knowledge.
- Experience administering or tuning SIEM and other security platforms.
- Understanding of secure network topology and segmentation.
- Experience evaluating, implementing, or improving security products.
- MSP experience.
- Microsoft environment experience.
- Security+, CISSP, GCIH, GSEC, or other relevant security certifications.