Security Engineer

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.This position is not eligible for immigration sponsorship, e.g., H-1B, TN, etc. Please do not apply if you will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B, TN, etc., now or in the future. We are unable to hire individuals with CPT, OPT, or STEM OPT for this position as the position is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship for a work visa.Location: This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).  General Summary of Job ResponsibilitiesThe Security Engineer plays a foundational role in supporting the organization’s security program by implementing security controls, monitoring systems for potential threats, and assisting with incident response efforts. This position provides hands-on experience in operating and securing security infrastructure, analyzing security events, and enhancing security processes. Working closely with senior engineers and cross-functional IT teams, the Security Engineer helps ensure the organization remains resilient against evolving cybersecurity threats.Essential Duties and ResponsibilitiesCollaborate with cross-functional teams, including Development, IT, and business stakeholders, to embed security best practices throughout the system lifecycle.Automate security processes where appropriate by leveraging scripting and Security Orchestration, Automation, and Response (SOAR) platforms to enhance efficiency and consistency in incident response and vulnerability management.Deploy and operate security tools and platforms within at least one of the following security domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management. These efforts should improve visibility, detection, and response capabilities across the organization.Implement, operate, and maintain comprehensive security solutions for systems, networks, and applications to ensure resilience against emerging threats.Participate in incident response and problem-solving activities, including investigating security events and implementing appropriate corrective actions.Assist in maintaining security policies, procedures, and documentation to support compliance with regulatory and organizational standards.Research and remain informed about emerging security threats, technologies, and industry practices to support continuous improvement efforts.Develop and optimize security controls by implementing technologies and process improvements that support business objectives while meeting security requirements.Knowledge/Skills/AbilitiesExcellent written and verbal communication skills, with the ability to effectively communicate with and influence both technical and non-technical stakeholders.Demonstrated ability to work effectively as part of a team while embodying the principles of being humble, hungry, and people-smart.Knowledge of cybersecurity technologies, principles, and concepts.Hands-on experience in at least one of the following security domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.Strong troubleshooting and problem-solving skills, with the ability to navigate systems and efficiently resolve routine technical issues.Education/ExperienceBachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, with two (2) or more years of hands-on experience with any of the following technologies and security disciplines: AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure AD, CI/CD Platforms, DDoS Protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure as Code (IaC) Security, Logging, Multifactor Authentication Technologies, Network Access Control (NAC), Networking Protocols, Scripting Languages, Software Composition Analysis (SCA), Secure Development Practices, Security Assessment and Testing, Security Configuration Assessment, Security Orchestration, Automation, and Response (SOAR) Tools, Single Sign-On (SSO), Static Application Security Testing (SAST), Threat Intelligence, Vulnerability Scanning and Assessment Tools, Virtual Private Networks (VPN), or Web Proxies.[OR] Associate degree in Cybersecurity, Computer Science, Information Technology, or a related field, with four (4) or more years of the experience outlined above.[OR] High school diploma or GED, with six (6) or more years of the experience outlined above.Why should you join our team? At Consumers Energy, we offer more than just a place to work. We foster a culture that supports career development, growth, and stability, and we take pride in offering our co-workers excellent benefits and compensation packages. We are deliberately creating an inclusive culture that makes our diverse team of co-workers feel valued, supported, and empowered every day. We're a company made up of thousands of people, all with different stories to share and work to do, but we stand united in our company purpose: world class performance delivering hometown service.What we offer: Competitive compensation packagesMedical, Dental and Vision401k with company matchPaid parental leaveUp to 13 paid HolidaysPaid time offEducational Assistance ProgramDiversity, Equity & Inclusion: We, at CMS Energy, value Diversity, Equity, & Inclusion. It is part of our DNA. We treat our employees with respect, we treat each other fairly and we value the opinions of others. We are passionate about building and nurturing an environment where everyone feels included. We don’t discriminate. We seek to learn about each other and better understand our unique differences. Our uniqueness makes us authentic. We create safe spaces where everyone can be who they truly are. We invite difficult conversations and uncomfortable topics. We value diverse perspectives; this is what makes us great together. We harbor an inclusive environment where employees feel empowered to share their backgrounds, experiences, and ideas. Our Employee Resource Groups, Women in Energy (WE), Minority Advisory Panel (MAP), Pride Alliance of Consumers Energy (PACE), GENERGY (Different Generations), capable (Different Abilities), Interfaith, People Planet Partners, and Veterans Advisory Panel (VAP) are key enablers to living the values of our company culture: Caring, Empowered, Deliberate, Agility, and Ownership.All qualified applicants will not be discriminated against and will receive consideration for employment without regard to protected veteran status, disability, race, color, religion, sex, age, sexual orientation, gender identity or national origin.