Security Engineer

Salary: $100,000 - 100,000 per year Requirements:

• Bachelors degree in information technology, computer science, cybersecurity, or a related field, or equivalent demonstrated experience.
• Five or more years of IT experience, including at least three years in a dedicated information security role.
• Hands-on production experience with next-generation firewalls (Fortinet strongly preferred) and Microsoft 365 and Entra ID security administration.
• Working knowledge of endpoint detection and response platforms, preferably CrowdStrike, sufficient to interpret, question, and audit provider-supplied reporting.
• Demonstrated experience managing or holding a managed service or managed security service provider accountable.
• Working knowledge of a recognized control framework, such as CIS Controls, NIST Cybersecurity Framework, or ISO/IEC 27001, as well as vulnerability management and incident handling.
• Strong written and verbal communication skills, including the ability to produce audit-grade documentation and executive-level reporting, explain security risks clearly to non-technical employees, and work independently in a lean IT organization supporting distributed sites.
• Transportation, logistics, warehousing, or third-party logistics experience is preferred.
• Experience with a private equity-backed portfolio company and sponsor-level security reporting obligations is preferred.
• Experience auditing vendor-provided security reports and participating in an MSP or MSSP transition is preferred.
• FortiManager and FortiClient EMS administration experience and PowerShell or Python scripting skills are preferred.
• Experience tracking emerging threats and security technologies, and familiarity with AI governance or acceptable-use frameworks, are preferred.
• Preferred certifications include CISSP, CISM, GIAC GSEC or GCIH, CompTIA Security+ or CySA+, Microsoft SC-200 or SC-300, and Fortinet NSE 4 or above.
• A reliable, private home work environment suitable for handling confidential company information is required.
• Availability outside standard hours, including evenings and weekends, is required for incidents, maintenance windows, cutovers, and on-call rotation participation.

• Act as our primary technical owner for information security and technical point of accountability for our MSSP, reporting to the VP of Technology and escalating directly to our private equity sponsor when the VP is unavailable.
• Design, implement, and independently validate safeguards for our network, endpoints, identities, data, and cloud services across operating sites, and demonstrate compliance with our Buske CIS Framework and sponsor reporting requirements.
• Serve as the primary technical liaison to our MSP, MSSP, and CSP; manage escalations and issue tracking, and review performance against contracted service levels quarterly.
• Specify the content, detail, and cadence of security reporting required from providers, ensure reporting obligations are included in contracts, and preserve them through provider transitions.
• Audit provider reports against company-held sources of truth, test findings against underlying evidence, investigate discrepancies, and drive them to resolution.
• Govern our CrowdStrike EDR platform through provider reporting and evidence; verify sensor coverage against asset, Entra ID, and Intune records; and review agent health, detection outcomes, policies, and exclusions each reporting cycle.
• Work with our Director of IT and IT Support Specialist to administer Entra ID P2 conditional access and privileged identity management, Defender for Office 365 Plan 2, Intune compliance baselines, and FortiClient EMS; enforce least privilege and reduce standing administrative access.
• Partner with our Network Engineer on FortiGate policies and rule reviews, segmentation and DMZ initiatives, remote access validation, FortiManager standards, and wireless, network access control, and IoT isolation.
• Set scope, risk-based remediation priorities, and service levels for provider-operated vulnerability and patch management; audit scan coverage and remediation evidence, and close findings and exceptions.
• Govern secure configuration baselines and maintain authoritative hardware and software inventories.
• Lead security incident response as technical incident commander, overseeing containment, eradication, recovery, and post-incident reviews; ensure High and Critical incidents are escalated to our sponsor within one hour through the VP of Technology.
• Support disaster recovery validation, backup integrity testing, and restoration exercises.
• Own our Buske CIS Framework roadmap and evidence library across all eighteen controls; prepare recurring cybersecurity reports for the VP of Technology and sponsor, and support audits, cyber insurance questionnaires, and customer security reviews.
• Assess vendor and third-party security and maintain our IT risk register.
• Own security awareness policy and define campaign, training, and escalation requirements for our provider-administered KnowBe4 program; audit completion and phishing-failure reports, drive remediation, and support annual IT security training.
• Communicate relevant cyber risks, including active phishing campaigns, scams, and other threats, to employees in clear, practical language; provide related training and respond to employee security questions through resolution.
• Research emerging threats, attack techniques, and technologies; evaluate and recommend appropriate controls and security technologies; and present findings and proposals to the VP of Technology.
• Lead our AI governance program by defining acceptable use, data handling, and review requirements; assess proposed AI services for security and data exposure risks before adoption; and monitor business use.
• Maintain assigned security policies, procedures, and network and data-flow documentation, and follow established change-management and purchase-approval processes.
• Perform other duties assigned by the VP of Technology.

• AI
• Cloud
• FortiGate
• Flow
• Hardware
• IoT
• Support
• Microsoft 365
• Network
• Office 365
• PowerShell
• Project Manager
• Python
• Security
• Windows

More:

We are Buske Lines Inc., and this Security Engineer role is central to protecting our distributed operations and demonstrating security compliance. The position works closely with our Network Engineer, Director of IT, IT Project Manager, IT Support Specialist, Data Engineer, and Human Resources, and reports to the VP of Technology. It is hybrid, primarily home-based during standard business hours, in Springfield, Missouri (65802), with occasional visits to our facilities and minimal travel; site visits may involve warehouse and equipment-room environments and handling computing equipment. We offer pay up to $100,000 per year and benefits including a 401(k) and matching, dental, health, life, and vision insurance, an employee assistance program, a health savings account, paid time off, and a retirement plan. The role may require after-hours or weekend work and on-call participation, and our job description may be revised; it is not an employment contract and does not change the at-will nature of employment.

last updated 42 week of 2026