Senior Cybersecurity Engineer

About mSupply™ 

mSupply is a North American distributor of OEM repair parts and equipment serving the appliance, HVAC and plumbing industries. Headquartered in St. Louis, the company combines industry expertise with a broad product selection and a national distribution network. 

With 2,000 employees across the United States and Canada, mSupply delivers speed and reliability at scale, with a vast product inventory and same-day shipping. Its family of brands is focused on making sure customers always get the Right Products. Right Now.™    For more information, visit mSupply.com. 

Job Summary The Senior Cybersecurity Engineer is a hands-on cybersecurity expert and senior technical escalation point responsible for engineering and improving enterprise security controls, developing high-value detections, leading complex investigations, automating security workflows, and driving identified risk to verified closure. This role supports a distributed, multi-business-unit environment spanning corporate services, branches, distribution operations, e-commerce, customer-facing platforms, supplier connections, and acquired-company environments. The Senior Cybersecurity Engineer partners with Technology, Application, DevOps, Audit, business, and managed-security teams to implement scalable, reliable, and measurable security solutions.   Job Duties & Responsibilities  

• Engineer, integrate, and optimize enterprise SIEM, EDR/XDR, identity, email, collaboration, and managed detection capabilities.
• Develop and tune security detections, threat-hunting queries, dashboards, and automated response workflows, including mapping coverage and gaps to MITRE ATT&CK.
• Establish and maintain secure configuration baselines, security controls, telemetry integrations, health checks, technical runbooks, and documented exceptions.
• Improve security monitoring through stronger log coverage, detection fidelity, alert severity, routing, escalation, and operational readiness.
• Lead complex security incidents through triage, investigation, evidence preservation, containment, eradication, recovery, and lessons learned, correlating endpoint, identity, email, cloud, application, network, and third-party telemetry.
• Serve as the senior technical escalation point for security operations and managed detection providers, validating findings and driving timely resolution.
• Develop and exercise incident-response playbooks and tabletop scenarios, converting lessons learned into sustainable security improvements.
• Prioritize vulnerabilities, misconfigurations, penetration-test results, and security assessment findings based on exploitability, threat intelligence, business criticality, compensating controls, and operational impact.
• Validate remediation through rescanning, control testing, manual verification, and evidence review, and manage security exceptions through accountable closure.
• Conduct security architecture and design reviews for applications, cloud/SaaS, DevSecOps, AI, acquisitions, suppliers, and third-party integrations.
• Automate security analysis, enrichment, evidence collection, remediation tracking, dashboards, and reporting to improve efficiency and visibility.
• Lead security-engineering initiatives, mentor security team members, and contribute to security standards, roadmaps, audit evidence, and operating procedures.

Qualifications

• 7+ years of progressive Information Technology experience preferred.
• 5+ years of experience in cybersecurity engineering, infrastructure security, security operations, vulnerability management, or related technical disciplines preferred.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Engineering, or related field preferred.
• Strong expertise with SIEM, EDR/XDR, detection engineering, incident investigation, and MITRE ATT&CK.
• Hands-on experience in at least two additional areas, such as identity and access management, vulnerability management, email/collaboration security, cloud/SaaS security, or security automation.
• Proven ability to lead complex, multi-source investigations and translate findings into sustainable security improvements.
• Hands-on proficiency with scripting, APIs, query languages, automation/orchestration, and version-controlled workflows.
• Strong security fundamentals across TCP/IP networking, operating systems, cloud, identity, and applications.
• Experience with vulnerability management, penetration testing, and recognized security frameworks such as NIST CSF, CIS Controls, ISO 27001, or PCI DSS.
• Strong analytical, troubleshooting, documentation, communication, and collaboration skills, with sound judgment, composure under pressure, and accountability for results.

Preferred Certifications  

• CISSP or comparable advanced cybersecurity certification.
• Experience in a distributed, e-commerce, supply-chain, or acquisition-driven enterprise.
• Exposure to AI security, DevSecOps, cloud security, or security architecture.
• Physical Demands & Work Environment
• Primarily sedentary work, requiring extended periods of sitting while working at a computer
• Ability to communicate effectively in person, via phone, and through virtual collaboration tools
• Occasional standing, walking, and movement during meetings, site visits, or travel
• Ability to lift and carry light materials (up to 15 lbs) occasionally, such as a laptop or presentation materials
• Ability to travel periodically for business needs, including visiting distribution centers, suppliers, stores, or industry events
• Office environment includes standard business equipment such as computers, phones, and conferencing tools

What We Offer:

• We prioritize your well-being from day one with a comprehensive benefits package that includes:
• Medical, dental, vision, and prescription coverage effective immediately
• 401(k) plan with company contributions
• Life insurance and short- and long-term disability coverage
• HSA/FSA options and an Employee Assistance Program (EAP)
• Paid time off, including vacation, holidays, and personal days
• Weekly pay, employee discounts, and more

Equal Employment Opportunity & Pre-Employment Requirements mSupply is an Equal Opportunity Employer. We make employment decisions without regard to sex, age, race, color, creed, religion, national origin, citizenship or immigration status, sexual orientation, gender identity or expression, disability, genetic information, marital status, veteran or military status, or any other status protected by applicable federal, state, or local law. We are committed to providing reasonable accommodation for qualified individuals with disabilities and to applicants with sincerely held religious beliefs, in accordance with applicable law. To request a reasonable accommodation, please contact [email protected]. #mSupply Final offers of employment may be contingent upon completion of job-related pre-employment checks and screenings permitted by law for the position. For roles that require operation of a company vehicle, a Motor Vehicle Record (MVR) check may also be conducted to determine insurability. This employer participates in E-Verify to confirm employment eligibility in the United States.

5+ years cybersecurity engineering experience preferred; Bachelor's degree in computer science, IT, cybersecurity, or related field preferred; strong expertise in SIEM, EDR/XDR, detection engineering, and MITRE ATT&CK; scripting and API proficiency.

Key Responsibilities

• engineering security controls
• developing detections
• leading investigations

Skills & Tools

SIEM, EDR/XDR, MITRE ATT&CK, NIST CSF, CIS Controls, ISO 27001, PCI DSS

Job Details

• Category: Information Technology
• Seniority: Senior Level
• Commitment: Full Time
• Workplace: Remote — United States
• Languages: English

Benefits

• 401k matching
• Generous paid time off
• Retirement plan

About mSupply

A North American distributor of OEM repair parts and equipment serving appliance, HVAC, and plumbing industries. — Industry: Retail and Wholesale

Apply Now →