Information Security Engineer II

Job DescriptionCollaborate with the Information Security team and IT, OT, and asset owners to reduce cyber risk by identifying, prioritizing, and remediating vulnerabilities across the Cooperative’s IT and Operational Technology (OT) environments, including manufacturing systems, industrial control systems (ICS), and plant networks.Job Duties and Responsibilities:Own day-to-day execution and continuous improvement of the Vulnerability Threat Management (VTM) programIdentify, analyze, prioritize, and track vulnerabilities across endpoints, servers, network devices, cloud workloads, Webservers and OT/manufacturing assetsAnalyze vulnerability data in the context of exploitability, asset criticality, business impact, and OT safety and availability constraintsCoordinate remediation efforts with IT infrastructure, application owners, plant engineers, and operations teams, ensuring clear ownership and trackingApply risk-based vulnerability management in environments where patching may be constrained by uptime, safety, regulatory, or vendor limitationsDevelop and maintain vulnerability dashboards, KPIs, and executive-level metrics to measure risk reduction and remediation effectivenessEnsure vulnerability management processes align with internal security standards, policies, and risk management practicesEvaluate and continuously improve vulnerability management tooling, scanning coverage, asset visibility, and data qualityCollaborate with cross-functional teams to promote secure configuration, patching best practices, and sustainable risk reductionIdentify and implement automation opportunities to improve remediation efficiency, workflow integration, and reporting accuracyThe requirements herein are intended to describe the general nature and level of work performed by employee, but is not a complete list of responsibilities, duties, and skills required. Other duties may be assigned.Job RequirementsMinimum Requirements:Education and ExperienceBachelor’s degree in information technology, Computer Science or related field preferred, or equivalent combination of education, certifications, and hands-on vulnerability management experience may be considered in lieu of a degree3 or more years’ experience with a strong focus on vulnerability management, specifically experience:managing the full vulnerability lifecycleinterpreting vulnerability data using CVEs, CVSS, exploitability, and threat intelligencecoordinating remediation across infrastructure, endpoint, network, application, and cloud teamsdeveloping and maintaining vulnerability metrics, dashboards, and executive-level reportingaligning vulnerability management activities with security frameworks such as NIST-800-53supporting enterprise vulnerability scanning platformsmanaging external service providersworking with Operation Technology devices in manufacturingimplementing and managing enterprise vulnerability scanning platforms integrating vulnerability management with ticketing, workflow, or ITSM platformsleveraging Microsoft Defender for Endpoint for vulnerability and exposure managementworking in the Dairy, Food and Beverage or Consumer Products industryExposure to OT, ICS, or manufacturing environments preferredKnowledge, Skills, and AbilitiesVulnerability lifecycle management: discovery, analysis, prioritization, remediation, and risk acceptanceRisk-based vulnerability prioritization using CVEs, CVSS, exploitability, and threat intelligenceVulnerability exception handling and compensating control assessmentVulnerability aging, SLA management, and remediation trackingUnderstanding of secure configuration, patching, and baseline complianceFamiliarity with hybrid and cloud environments (Azure, AWS, or equivalent)Knowledge of endpoint and server hardening best practicesSkill in critical thinking, analysis, mathematical calculations, and statistical evaluationsAble to translate technical vulnerabilities into business and operational riskAble to communicate clearly and effectively, both verbally and in writingAble to apply technology solutions to business problemsAble to work with accuracy and attention to detailAble to work in collaboration effectively and foster good teamworkAble to present ideas using language that is relatable to business and end-usersAble to consider impact of actions and decisions on employees, coworkers, and customersAble to multi-task and problem solveAble to work independently and as part of a teamAble to prioritize and meet deadlinesAble to promote a team environmentAble to present to diverse audiences from front line team members to senior managementAble to perform task and duties without constant supervisionAble to read, write, and speak EnglishAn Equal Opportunity Employer including Disabled/VeteransJob DetailsJob Type: Full TimeCategory: Information Technology