Senior Security Engineer

We are seeking an experienced Senior Cybersecurity Engineer to lead the strategy, design, implementation, and governance of cybersecurity programs across both Information Technology (IT) and Operational Technology (OT) environments. This hands‑on leadership role is responsible for securing enterprise infrastructure, manufacturing systems, and operational networks while partnering closely with IT, engineering, and plant operations teams to establish and maintain a secure‑by‑design environment. The ideal candidate will possess deep expertise in enterprise security architecture, industrial cybersecurity, risk management, incident response, and compliance frameworks, with the ability to bridge security requirements across corporate and manufacturing operations. Key Responsibilities Security Architecture & Strategy Design, implement, and maintain enterprise‑wide cybersecurity architecture spanning both IT and OT environments. Develop and maintain cybersecurity standards, policies, procedures, and governance frameworks aligned with industry best practices such as NIST, ISO 27001, and IEC 62443. Define and oversee secure network architectures for corporate and manufacturing environments, including LAN, WAN, wireless, and segmented network infrastructures. Act as the cybersecurity subject matter expert (SME) for enterprise initiatives, technology deployments, and operational projects. IT Security & Infrastructure Secure and manage enterprise technology environments, including: Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive) Active Directory and Microsoft Entra ID (Azure AD) Endpoint security for laptops, desktops, and mobile devices Identity and Access Management (IAM) Zero Trust and Conditional Access architectures Oversee vulnerability management, security monitoring, and remediation programs. Design and support secure network segmentation, firewalls, switches, and access control technologies. Collaborate with infrastructure and networking teams to strengthen enterprise security posture. Operational Technology (OT) Security Develop and maintain cybersecurity controls for manufacturing and industrial environments, including: Manufacturing Execution Systems (MES) Industrial control systems, SCADA, and PLC networks OT network segmentation and secure communication architectures Ensure security controls are implemented without disrupting production operations. Align OT security programs with recognized industrial cybersecurity standards and best practices. Partner with engineering and plant operations teams to identify and mitigate operational security risks. Security Operations & Incident Response Implement and manage security monitoring technologies, including SIEM, SOC, EDR, email security, and identity protection solutions. Lead incident response, threat detection, investigation, containment, and recovery activities. Conduct security assessments, audits, vulnerability reviews, and risk analyses. Develop and maintain incident response procedures and playbooks. Provide executive‑level reporting and communication regarding security posture, risks, and remediation activities. Establish and enforce cybersecurity policies, standards, and procedures. Support compliance initiatives involving frameworks and standards such as SOC 2, ISO 27001, NIST, IEC 62443, and TISAX. Conduct vendor security assessments and third‑party risk reviews. Collaborate with internal stakeholders and external partners to ensure security requirements are integrated into business operations and technology initiatives. Promote continuous improvement of the organization’s overall cybersecurity posture. Required Qualifications Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline. 5+ years of progressive cybersecurity experience, including architecture, engineering, or security leadership responsibilities. Strong experience securing both IT and OT environments. Network security (LAN, WAN, VLANs, firewalls, switching) Microsoft 365 security technologies Identity and Access Management (IAM) Zero Trust security models Incident response and threat management Hands‑on experience designing secure network architectures and firewall implementations. Experience securing cloud environments, preferably Microsoft Azure. Strong knowledge of cybersecurity frameworks, standards, and regulatory requirements. Excellent analytical, problem‑solving, communication, and stakeholder management skills. Ability to thrive in a fast‑paced, dynamic, and highly collaborative environment. Preferred Qualifications Experience with application and software security programs. Background supporting SaaS, cloud service providers, or technology‑driven organizations. Consulting or advisory experience involving cybersecurity assessments and security program development. Experience with threat modeling, security architecture documentation, and project governance. Familiarity with security risk management methodologies and risk communication practices. Knowledge of cybersecurity engineering principles, penetration testing methodologies, and ethical hacking concepts. Experience working with data analytics, SQL, Python, and large‑scale technology environments. Certifications One or more of the following certifications is preferred: CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) CISA (Certified Information Systems Auditor) CRISC (Certified in Risk and Information Systems Control) GIAC Security Certifications ITIL ISO 27001 Lead Implementer or Lead Auditor CCIE Security Additional Information Familiarity with quality and environmental management standards, including IATF 16949, VDA 6.3, and ISO 14001, is beneficial. Strong commitment to continuous improvement and advancing organizational cybersecurity maturity. Occasional domestic travel may be required. #J-18808-Ljbffr Provisions Group