Sr. Specialist, Cybersecurity Engineering

Job Description

Role Summary

The Senior Specialist, Cybersecurity Engineering is a hands-on security engineer responsible for securing our Company's strategic enterprise platforms through implementation, automation, assurance, and continuous risk reduction. This role partners with platform owners, engineers, architects, and product teams to embed security controls, improve resilience, standardize governance, and maintain trusted platform operations across critical business platforms.

Key Responsibilities

• Engineer, implement, and maintain security controls across strategic platforms including SAP, Salesforce, Databricks, Microsoft 365, ServiceNow, Veeva, AI platforms, and enterprise SaaS/PaaS services.

• Support platform assurance through security assessments, control validation, risk reduction, and compliance readiness activities.

• Integrate security capabilities into platform delivery, CI/CD workflows, and operational processes.

• Develop automation, controls-as-code, and reusable security patterns to improve platform security and operational efficiency.

• Monitor platform security posture, investigate gaps, and drive remediation of findings.

• Partner with platform teams to improve resilience, onboarding experience, and secure adoption.

• Contribute to security standards, operational procedures, and engineering best practices.

• Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field.

• 5+ years of experience in cybersecurity engineering, cloud security, platform security, or DevSecOps.

• Fluent in modern AI technologies and practical enterprise use cases.

• Able to apply AI to improve cybersecurity engineering, automation, investigations, and operational efficiency.

• Understands emerging AI security risks and supports secure adoption of AI capabilities across strategic platforms.

• Hands-on experience implementing security controls in PaaS, SaaS, or enterprise platforms.

• Experience with identity security, security automation, logging, monitoring, and vulnerability remediation.

• Knowledge of Kubernetes, APIs, CI/CD pipelines, and modern cloud-native technologies.

• Strong troubleshooting, problem-solving, and collaboration skills.

• Preferred Qualifications

• Experience supporting SAP, Salesforce, Databricks, Microsoft 365, ServiceNow, Veeva, or similar enterprise platforms.

• Experience with AI security, software supply chain security, and platform governance.

• CISSP, CCSP, CCSK, GIAC, AWS, or Azure security certifications.

• Experience in regulated enterprise environments.

Required Skills

• Certificate Services, Certificate Services, Cloud Security, Corporate Security Management, Cybersecurity, Cybersecurity Analytics, Cybersecurity Operations, Delivery of Security Applications, Design Applications, DevSecOps, Identity Access Management (IAM), Incident Response, Information Assurance, Information Security, IT Security Architecture, Network Segmentation, Operational Technology (OT) Security, Platform as a Service (PaaS), Security Analysis, Security Analytics, Security Audit, Security Automation, Security Compliance, Security Controls, Security Engineering {+ 10 more}

Preferred Skills:

• San Francisco Residents Only: We will consider qualified applicants with arrest and conviction records for employment in compliance with the San Francisco Fair Chance Ordinance

• Los Angeles Residents Only: We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance

• Search Firm Representatives Please Read Carefully

• Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Employee Status:

• Regular

Relocation:

VISA Sponsorship:

Travel Requirements:

Flexible Work Arrangements:

• Hybrid

Shift:

Valid Driving License:

Hazardous Material(s):

Job Posting End Date:

• 10/21/2026
• A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.