Cyber Security Engineer I

Cybersecurity Engineer IThe Cybersecurity Engineer I is a hands-on role that provides critical support to TAMKO's integrated IT and Operational Technology (OT) security operations. This position offers direct exposure to modern security tools, incident response procedures, and vulnerability management across both IT and industrial systems. Working in close collaboration with senior cybersecurity engineers and cross-functional teams, the successful candidate will develop practical expertise in security monitoring, threat detection, and incident response while contributing meaningfully to TAMKO's evolving security posture. This role is ideal for individuals seeking to build a foundation in security operations and establish themselves as technical problem-solvers in a dynamic, mission-critical environment.Summary of Essential Job Functions To perform this job successfully an individual must be able to perform each essential function satisfactorily. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions. Other duties may be assigned.Security Monitoring & Threat DetectionMonitor IT and OT environments using SIEM tools and dashboards to identify, investigate, and escalate security incidents, anomalies, and vulnerabilities in real timeMaintain situational awareness through continuous event analysis and reporting, providing timely summaries and insights to support proactive threat detection and responseIncident Response & InvestigationSupport incident detection, triage, containment, and investigation activities, collecting evidence and documenting findings in alignment with established response playbooksContribute to post-incident reviews and recommend improvements to strengthen prevention, detection, and response processesVulnerability Management & RemediationPerform scheduled and ad-hoc vulnerability assessments across IT and OT systems, supporting prioritization, remediation planning, and patch validationTrack remediation progress, verify system hardening, and maintain metrics to ensure timely risk reductionSecurity Tool Configuration & MaintenanceConfigure, update, and maintain security tools and agents across IT and OT environments, ensuring reliable deployment and integrationTroubleshoot tool performance issues, escalate complex problems, and maintain clear documentation of configurations and operational proceduresOT Security OperationsApply OT/ICS security principles to monitor and protect industrial control systems, supporting threat identification across IT and OT environmentsCollaborate with OT and engineering teams to assess security gaps, recommend mitigations, and participate in risk assessments for critical systemsDevelop and maintain OT security documentation, including playbooks, runbooks, architectures, and incident response recordsSupport compliance efforts by preparing evidence and documentation for audits and contributing to continuous improvement initiativesCross-Functional CollaborationWork closely with IT, OT, and business teams to integrate security into operational processesCommunicate security findings to technical and non-technical stakeholders in clear, actionable termsParticipate in security training initiatives and knowledge-sharing sessionsContribute to vendor evaluations, security tool assessments, and technology recommendationsContinuous Learning & DevelopmentStay current with security trends, emerging threats, and new attack vectors through training and researchParticipate in security labs, tabletop exercises, and hands-on training opportunitiesMentor and seek mentorship from senior team members to accelerate skill developmentRequired QualificationsEducation or Work BackgroundBachelor's degree in Cybersecurity, Computer Science, Information Security, Information Technology, or related field; or3 or more years of practical cybersecurity experience in a production environment, demonstrating applied knowledge of cybersecurity fundamentals through real-world projects, operations, or equivalent hands-on workExperience1–3 years of hands-on experience in IT or OT environments, with exposure to security operations, monitoring, or system administrationDemonstrated ability to work with technical systems, troubleshoot problems, and document findingsDemonstrated ability to implement and operationalize new technologies in production environmentsTechnical SkillsExposure to cloud platforms like Azure, AWS, or Google Cloud, including a basic understanding of cloud-native security tools and setupsFamiliarity with AI-assisted or data-driven threat detection tools to support faster analysis and responseStrong working knowledge of Windows and Linux/Unix operating systems and command-line interfacesBasic proficiency in networking concepts: TCP/IP, DNS, routing, VLANs, firewalls, and network segmentationFoundational knowledge of endpoint security, including antivirus, EDR/XDR concepts, and endpoint hardeningAbility to read, understand, and analyze security logs and event dataScripting fundamentals in Python or PowerShell (ability to write or read/modify existing scripts)Basic understanding of vulnerability scanning tools and vulnerability assessment processesFamiliarity with Identity and Access Management (IAM) principles and access control conceptsSoft SkillsExcellent written and verbal communication abilities; ability to clearly explain technical concepts to both technical and non-technical audiencesStrong problem-solving mindset and intellectual curiosity about how systems work and failHigh attention to detail and ability to follow procedures while identifying process improvementsAbility to manage multiple tasks, prioritize effectively, and work under pressure during security incidentsAbility to work independently with minimal supervision while escalating appropriately when neededAdaptability and willingness to learn new tools, technologies, and security methodologiesPreferred QualificationsOT/ICS security frameworks: NIST, CIS, IEC 62443, or NERC CIPFamiliarity with cloud security concepts (AWS, Azure, or Google Cloud) and cloud-based security toolsManufacturing, industrial automation, or critical infrastructure environment experiencePhysical Requirements/Work Environment The physical demands described here are representative of those that must be met by an employee to perform the essential functions of this job. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.The employee must be able to operate computer and other office equipment.The noise level in the work environment is usually quiet and occasionally moderate.In addition to competitive wages, TAMKO offers a comprehensive benefits package, including Group Health and Life Insurance, Vision and Dental Insurance, a Flexible Benefits Plan, a 401(k) Retirement Plan with company match, a Profit Sharing Retirement Plan, and other valuable benefits.This job description is intended to describe the general nature and level of work expected. It is not intended to be an exhaustive list of all responsibilities, duties, or skills required and is subject to change at any time based on business needs.TAMKO Building Products LLC is one of the nation's largest independent manufacturers of residential and commercial roofing products, waterproofing products, and related building materials. Headquartered in Galena, Kansas, TAMKO has been committed to innovation, quality, and customer service for over 80 years. Our success is driven by our people — individuals who take pride in their work, share an ownership mindset, and are dedicated to delivering excellence. At TAMKO, we strive to foster a safe, supportive, and rewarding work environment where employees can grow and succeed.Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.