Info Security Specialist

Schneller LLC; Kent (OH); On-site; USD 75,000 - 110,000; Full time

Job summary

Schneller LLC is seeking an Information Security Specialist to operate, strengthen, and improve our internal information security program. This hands-on role covers security operations, IAM, endpoint and network security, vulnerability management, third-party risk, compliance, and security awareness.

The successful candidate will contribute across IT and business teams and take on ownership as they grow into a senior role.

Qualifications

• Hands-on experience across multiple security domains.
• Experience with SIEM/EDR and vulnerability management.
• Familiarity with cloud platforms and secure configurations.

Responsibilities

• Monitor and respond to alerts from security platforms and SOC tooling.
• Investigate incidents, triage, containment, and post-incident reviews.
• Administer IAM controls including SSO, MFA, and onboarding/offboarding.
• Conduct access reviews to identify stale accounts and excessive permissions.
• Maintain endpoint security controls and patch compliance.
• Review firewall rules, VPN access, and network segmentation.
• Coordinate vulnerability scans and remediation with owners.
• Support compliance activities, policy maintenance, and audits.
• Perform third-party security reviews and track risk mitigations.
• Develop security awareness initiatives and phishing simulations.
• Serve as point of contact for security concerns and incidents.
• Create security standards, runbooks, and operational docs.
• Automate security/IT processes via scripting and workflows.
• Participate in on-call rotation during urgent incidents.

Skills

Security operations

Identity and access management

Endpoint security

Vulnerability management

Network security

Compliance

PowerShell

Python

Bash

Scripting for automation

Education

CompTIA Security+

CISSP or CISM

Tools

SIEM

EDR

Vulnerability scanning platforms

Email security tools

Identity providers

Job description

Information Security Specialist

We are seeking an Information Security Specialist to help operate, strengthen, and continuously improve our internal information security program. This is a hands-on, cross-functional role for a security professional who enjoys working across multiple disciplines. You will contribute to security operations, identity and access management, endpoint and network security, vulnerability management, third-party risk, compliance, and employee security awareness. Working closely with IT and business teams, you will help reduce risk, strengthen security controls, and protect the organization while supporting a productive and practical working environment. This position is well suited to someone with at least three years of broad IT and information security experience who is ready to take greater ownership and grow into a senior internal security role.

Key Responsibilities

• Monitor and respond to alerts from SIEM, EDR, identity, email security, and other security platforms.
• Investigate and triage potential security incidents; elevate issues as appropriate; and assist with containment, remediation, recovery, and post-incident reviews.
• Administer identity and access management controls, including SSO, MFA, directory services, privileged access, and employee onboarding, transfer, and offboarding processes.
• Conduct periodic access reviews to identify and address stale accounts, excessive permissions, and inappropriate entitlements.
• Maintain and improve endpoint security controls, including EDR coverage, patch compliance, secure configuration baselines, disk encryption, and device health.
• Review firewall rules, VPN access, network segmentation, and related configurations to identify unnecessary access and security gaps.
• Support the vulnerability management lifecycle by coordinating scans, validating findings, prioritizing risk, partnering with system owners on remediation, and reporting program metrics.
• Contribute to compliance and assurance activities, including policy maintenance, evidence collection, control testing, customer security questionnaires, and audit preparation.
• Conduct third-party security reviews, document vendor risks, and track remediation plans and approved risk acceptances.
• Develop and deliver security awareness initiatives, including phishing simulations, onboarding training, employee communications, and practical security guidance.
• Serve as a point of contact for employees reporting suspicious messages, lost or stolen devices, access concerns, and other security-related issues.
• Create and maintain security standards, procedures, runbooks, diagrams, and operational documentation.
• Identify and implement opportunities to automate repetitive security and IT processes through scripting and workflow tools.
• Participate in the security on-call rotation and assist with urgent incidents outside normal business hours when necessary.

Required Qualifications

• At least three years of professional experience in information security, IT operations, infrastructure, systems administration, or a related field.
• Hands-on experience across multiple security domains, such as security operations, identity and access management, endpoint security, vulnerability management, network security, or compliance.
• Working knowledge of security technologies such as SIEM, EDR, vulnerability scanning platforms, email security tools, and identity providers.
• Experience administering an identity platform such as Microsoft Entra ID, Okta, or a comparable solution.
• Familiarity with at least one major cloud platform, such as Microsoft Azure, Amazon Web Services, or Google Cloud Platform.
• Strong understanding of networking, operating systems, authentication, authorization, and common security controls.
• Experience using PowerShell, Python, Bash, or another scripting language for automation, reporting, or troubleshooting.
• Strong written and verbal communication skills, including the ability to explain security risks and requirements to nontechnical audiences.
• Ability to work independently, manage competing priorities, and collaborate effectively with technical and business teams.
• A relevant industry certification, such as CompTIA Security+, CySA+, CISSP, CISM, CISA, CRISC, GIAC, or an equivalent credential.
• Willingness to participate in an on-call rotation.

What Success Looks Like

During your first year, you will be expected to:

• Improve visibility into security events and strengthen alert response and incident-management processes.
• Expand endpoint, identity, patching, and vulnerability-management coverage.
• Strengthen access reviews and employee lifecycle controls.
• Improve audit readiness and the quality, consistency, and accessibility of security documentation.
• Identify and implement practical opportunities to reduce risk through automation and process improvement.