Merck is seeking an Associate Specialist, Cybersecurity Operations to support the Cyber Fusion Center’s efforts to identify, analyze, and remediate cybersecurity risks across manufacturing and operational technology environments. The role supports vulnerability management, threat monitoring, incident response, cyber hygiene, governance, and stakeholder coordination under the supervision of the OT Security Lead.
Support the identification and remediation of OT vulnerabilities and misconfigurations in alignment with internal prioritization and remediation guidelines
Collaborate with manufacturing sites, engineering teams, and cybersecurity teams to improve OT security posture
Assist with vulnerability scanning and assessment activities across OT assets, applications, and infrastructure
Monitor and analyze potential cyber threats and escalate issues to senior team members or incident response teams as appropriate
Support threat analysis and threat hunting activities under guidance from senior analysts
Assist in preparing reports and communications on OT risk, vulnerabilities, and remediation progress
Support OT cybersecurity governance, metrics, and reporting activities within the Cyber Fusion Center
Utilize enterprise tools (e.g., ServiceNow) to track and manage vulnerability remediation tasks
Execute cyber hygiene activities across manufacturing environments, including asset inventory validation, patching coordination support, backup validation checks, endpoint hardening activities, account and access reviews, and identification of unnecessary services or network communications
Support implementation and maintenance of baseline OT security controls such as network segmentation, firewall rule hygiene, and secure remote access
Participate in continuous improvement initiatives and help identify opportunities for automation and process enhancements
Qualification
Required
HS Diploma required
0–3 years of experience in cybersecurity, IT operations, or related technical fields
Foundational understanding of cybersecurity concepts including vulnerability management, incident response, and network security
Exposure to security tools such as SIEM, endpoint protection, or logging platforms
Strong analytical and problem-solving skills with the ability to learn quickly in a fast-paced environment
Effective written and verbal communication skills
Ability to work collaboratively across teams and stakeholders
Basic experience with data analysis and working with multiple data sources
Preferred
Exposure to Industrial Control Systems (ICS), including PLCs, SCADA, or DCS environments
Basic understanding of OT network protocols (e.g., Modbus, OPC, DNP3)
Familiarity with cybersecurity tools or platforms used in OT or enterprise environments
Awareness of cyber threats and vulnerabilities in OT/ICS environments
Exposure to vulnerability management or ticketing tools (e.g., ServiceNow)
Interest in pursuing cybersecurity certifications (e.g., Security+, GICSP)
Benefits
Eligible for annual bonus and long-term incentive, if applicable.
Medical, dental, vision healthcare and other insurance benefits for employee and family.
Retirement benefits, including 401(k).
Paid holidays.
Vacation.
Compassionate and sick days.
Hybrid flexible work arrangement.
Merck is a biopharmaceutical company that offers medicines and vaccines for various diseases.
Glassdoor
4.1
Founded in 1891
Rahway, New Jersey, USA
10001+ employees
http://www.merck.com
Merck is a biopharmaceutical company that offers medicines and vaccines for various diseases.
