IT Security Engineer

Requirements:

• We are looking for 5 to 8+ years of experience in IT security engineering, SOC operations, or incident response.
• We need strong practical expertise with Windows Server and client security, network and firewall security, endpoint security platforms, and MFA or identity systems.
• We require solid knowledge of Active Directory and identity security best practices.
• We expect hands-on experience hardening servers, endpoints, and network devices.
• We value familiarity with log analysis and security event triage.
• We need comfort working directly with SOC alerts and vulnerability scan reports.
• We expect an understanding of security frameworks such as NIST CSF, CIS Controls, and SOC 2.
• We look for strong documentation habits and a process-driven mindset.
• We prefer experience in manufacturing, industrial, or OT/ICS environments.
• We prefer working knowledge of PLCs or ISA/IEC 62443 principles.
• We value familiarity with Office 365 security configuration and best practices.
• We prefer experience automating workflows with PowerShell or Python.
• We welcome exposure to segmentation initiatives or Zero Trust principles.
• Relevant certifications such as GSEC, GCED, GCIH, GDSA, GDAT, GICSP, GCIP, or GRID are preferred.
• Applicants must be authorized to work in the United States on a full-time, permanent basis without current or future visa sponsorship.

Responsibilities:

• We review alerts and escalations from our MSSP to assess severity, business impact, and the right response.
• We carry out technical investigation steps and support containment, eradication, and recovery efforts.
• We harden and secure Windows servers, Windows clients, virtual machines, and other IT infrastructure.
• We oversee the secure setup, deployment, and administration of endpoint protection, including SentinelOne.
• We partner with our IT infrastructure team to maintain secure configurations across firewalls, switches, and network segments.
• We support network security enhancements such as segmentation, least-privilege access, and secure remote connectivity.
• We review firewall rules and contribute to broader network hardening activities.
• We support secure configuration of identity platforms and strengthen access controls.
• We enforce role-based access control, privileged access hygiene, and identity hardening standards.
• We work with our MSSP to ensure vulnerability scans are executed correctly and tuned appropriately.
• We validate scan findings, prioritize risk, and coordinate remediation with system and network teams.
• We lead patching and configuration remediation for high-risk assets.
• We collaborate with developers to identify, prioritize, and resolve application security issues, including OWASP Top 10 concerns.
• We conduct security assessments of applications and servers.
• We partner with OT engineers to understand legacy systems, PLCs, and plant-floor constraints and help implement OT segmentation and ICS security controls.
• We actively monitor emerging threats affecting both OT and IT environments.
• We perform periodic threat modeling for high-risk applications and systems.

Technologies:

• Active Directory
• Firewall
• Support
• Network
• OWASP
• Office 365
• PowerShell
• Python
• Security
• Windows

More

We are a food and beverage manufacturing organization building and maturing our cybersecurity program. This is a highly technical, hands-on role for a driven, detail-oriented security engineer who enjoys securing systems and networks, conducting investigations, and working closely with IT and OT teams. You will serve as our primary hands-on technical resource for cybersecurity initiatives and partner closely with our IT teams and MSSP SOC. The compensation range for this position is $125K to $135K annually, depending on experience, skills, and education. We do not provide visa sponsorship or immigration support, and applicants must already be authorized to work in the United States on a full-time, permanent basis.

last updated 43 week of 2026