Cybersecurity Platform Engineer

Jacklinksproteinsnacks; Minneapolis (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

Link Snacks is seeking a Cybersecurity Platform Engineer to join our Global IT organization. This role leads the development, configuration, automation, and continuous improvement of enterprise cybersecurity platforms with a focus on Defender, Purview, cloud security, and IAM.

The engineer owns the security tools' design, integration, governance, monitoring, and optimization to reduce risk and support business objectives.

Qualifications

• Bachelor's degree or equivalent professional experience in a related field.
• 4+ years engineering or optimizing cybersecurity platforms across Microsoft security, cloud security, IAM, data protection, or security operations domains.
• Strong foundation in cybersecurity platform engineering across endpoint, cloud, IAM, and automation.
• Proficient with Microsoft Defender, Purview, Entra ID, Intune, AD, and 365 security/compliance capabilities.

Responsibilities

• Lead the engineering, administration, and continuous improvement of Defender capabilities and related security integrations.
• Design and mature Purview capabilities for data protection and governance, DLP, insider risk, and compliance controls.
• Engineer cloud security across Azure and 365 environments, including baseline configurations, posture management, logging, and remediation tracking.
• Lead IAM engineering activities including Entra ID, AD, CA, access reviews, and automation of lifecycle processes.
• Develop automation and integrations to improve platform reliability and enforce controls across global environments.
• Collaborate with security operations, MDR, SIEM, and OT teams to integrate platforms with incident response and vulnerability management.
• Create and maintain platform standards, runbooks, diagrams, and audit-ready evidence for regulatory requirements.
• Define and report platform health, control effectiveness, and security metrics for technical teams and leadership.
• Evaluate emerging capabilities and industry best practices to strengthen security posture.

Skills

Cybersecurity platform engineering

Automation

Communication skills

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, or related field

Tools

Microsoft Defender

Microsoft Purview

Entra ID

Active Directory

PowerShell

Intune

Job description

Link Snacks is seeking a Cybersecurity Platform Engineer to join our Global IT organization. This role is responsible for leading the development, configuration, automation, and continuous improvement of enterprise cybersecurity platforms, with a primary focus on Microsoft Defender, Microsoft Purview, cloud security capabilities, and identity and access management (IAM). The Cybersecurity Platform Engineer serves as the technical owner for key security tools and capabilities, ensuring they are properly designed, integrated, governed, monitored, and optimized to reduce risk and support business objectives.

This position requires deep hands‑on engineering experience, strong cybersecurity fundamentals, and the ability to translate risk, compliance, and operational needs into scalable platform solutions. The Cybersecurity Platform Engineer will partner closely with infrastructure, networking, application, data, OT, and business teams to mature security controls across cloud, endpoint, identity, collaboration, and data protection environments. This role also requires strong automation, documentation, and communication skills to ensure security platforms are operationally sustainable, measurable, and aligned with global business needs.

KEY RESPONSIBILITIES

• Lead the engineering, administration, and continuous improvement of Microsoft Defender capabilities, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, and related security integrations.
• Design, implement, and mature Microsoft Purview capabilities for data protection, information governance, data loss prevention, insider risk, eDiscovery support, retention, sensitivity labeling, and compliance-driven control enforcement.
• Engineer cloud security controls across Microsoft Azure and Microsoft 365 environments, including secure configuration baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement, and remediation tracking.
• Lead identity and access management engineering activities, including Entra ID, Active Directory, Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access, and secure authentication patterns.
• Develop automation, scripts, integrations, and repeatable processes that improve security platform reliability, reduce manual effort, standardize controls, and support consistent enforcement across global environments.
• Partner with security operations, MDR, SIEM, infrastructure, network, application, data, and OT teams to integrate cybersecurity platforms with detection, response, vulnerability management, incident response, and operational workflows.
• Create and maintain security platform standards, configuration baselines, procedures, runbooks, diagrams, operational documentation, and audit‑ready evidence supporting regulatory and cybersecurity framework requirements.
• Define and report platform health, control effectiveness, adoption, remediation progress, secure configuration status, and other actionable security metrics for technical teams and leadership stakeholders.
• Evaluate emerging cybersecurity platform capabilities, Microsoft security roadmap changes, cloud security trends, and industry best practices to recommend practical improvements that strengthen the organization’s security posture.
• Perform other duties as assigned.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent professional experience.
• 4 + years of hands‑on experience engineering, administering, or improving cybersecurity platforms across Microsoft security, cloud security, identity, endpoint, data protection, or security operations domains.
• Strong foundation in cybersecurity platform engineering, including endpoint security, cloud security, IAM data protection, compliance controls, automation, and incident response support.
• Proficient in Microsoft security and identity technologies, Windows, Linux, PowerShell, scripting, API‑based integrations, and automation of security operations processes.
• Strong experience with Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Active Directory, Microsoft Sentinel, and Microsoft 365 security and compliance capabilities.
• Skilled in platform configuration, log analysis, alert tuning, dashboarding, control validation, secure baseline development, and remediation tracking.
• Proven ability to secure both IT and OT networks, including experience with incident response, alert triaging, and vulnerability management.
• Proficient in managing identity and access controls, including Active Directory administration and privileged access management.
• Skilled in executing cybersecurity strategies and enforcing technical policies across enterprise environments.
• Experienced in working with security frameworks and standards such as ISO 27001, NIST CSF, and GDPR.
• Cap