Information Security Engineer II

Dairy Farmers of America; Kansas City (KS); On-site; USD 90,000 - 130,000; Full time

Job summary

Dairy Farmers of America is seeking a Vulnerability Management professional to reduce cyber risk across IT and OT environments, including manufacturing systems. You will own the VTM program, analyze CVEs, coordinate cross-team remediation, and produce executive-level risk dashboards.

The role emphasizes risk-based prioritization, collaboration with plant engineers, and adherence to security frameworks such as NIST-800-53. Strong communication and problem-solving are essential.

Qualifications

• 3+ years' experience with vulnerability management lifecycle.
• Experience interpreting vulnerability data using CVEs, CVSS, exploitability, and threat intel.
• Coordinating remediation across infrastructure, endpoints, networks, applications, and cloud teams.

Responsibilities

• Own day-to-day execution and improvement of the Vulnerability Threat Management program.
• Identify, analyze, prioritize, and track vulnerabilities across endpoints, servers, network devices, cloud workloads, and OT assets.
• Coordinate remediation with IT, OT, plant engineers, and operations teams with clear ownership.
• Develop and maintain vulnerability dashboards, KPIs, and executive-level metrics.

Skills

Vulnerability lifecycle management

CVSS & CVEs interpretation

Risk-based prioritization

Stakeholder coordination

NIST-800-53 familiarity

Vulnerability dashboards & metrics

OT/manufacturing security exposure

Microsoft Defender for Endpoint

Hybrid/Cloud environments

Professional English communication

Education

Bachelor's degree in information technology or related field

Tools

Microsoft Defender for Endpoint

Vulnerability scanning platforms

ITSM platforms

Azure

AWS

Job description

Collaborate with the Information Security team and IT, OT, and asset owners to reduce cyber risk by identifying, prioritizing, and remediating vulnerabilities across the Cooperative's IT and Operational Technology (OT) environments, including manufacturing systems, industrial control systems (ICS), and plant networks.

Job Duties and Responsibilities:

• Own day-to-day execution and continuous improvement of the Vulnerability Threat Management (VTM) program
• Identify, analyze, prioritize, and track vulnerabilities across endpoints, servers, network devices, cloud workloads, Webservers and OT/manufacturing assets
• Analyze vulnerability data in the context of exploitability, asset criticality, business impact, and OT safety and availability constraints
• Coordinate remediation efforts with IT infrastructure, application owners, plant engineers, and operations teams, ensuring clear ownership and tracking
• Apply risk-based vulnerability management in environments where patching may be constrained by uptime, safety, regulatory, or vendor limitations
• Develop and maintain vulnerability dashboards, KPIs, and executive-level metrics to measure risk reduction and remediation effectiveness
• Ensure vulnerability management processes align with internal security standards, policies, and risk management practices
• Evaluate and continuously improve vulnerability management tooling, scanning coverage, asset visibility, and data quality
• Collaborate with cross-functional teams to promote secure configuration, patching best practices, and sustainable risk reduction
• Identify and implement automation opportunities to improve remediation efficiency, workflow integration, and reporting accuracy
• The requirements herein are intended to describe the general nature and level of work performed by employee, but is not a complete list of responsibilities, duties, and skills required. Other duties may be assigned.

Minimum Requirements:

Education and Experience

• Bachelor's degree in information technology, Computer Science or related field preferred, or equivalent combination of education, certifications, and hands‑on vulnerability management experience may be considered in lieu of a degree
• 3 or more years' experience with a strong focus on vulnerability management, specifically experience:
  • managing the full vulnerability lifecycle
  • interpreting vulnerability data using CVEs, CVSS, exploitability, and threat intelligence
  • coordinating remediation across infrastructure, endpoint, network, application, and cloud teams
  • developing and maintaining vulnerability metrics, dashboards, and executive-level reporting
  • aligning vulnerability management activities with security frameworks such as NIST-800-53
  • supporting enterprise vulnerability scanning platforms
  • managing external service providers
  • working with Operation Technology devices in manufacturing
  • implementing and managing enterprise vulnerability scanning platforms
  • integrating vulnerability management with ticketing, workflow, or ITSM platforms
  • leveraging Microsoft Defender for Endpoint for vulnerability and exposure management
  • working in the Dairy, Food and Beverage or Consumer Products industry
• Exposure to OT, ICs, or manufacturing environments preferred

Knowledge, Skills, and Abilities

• Vulnerability lifecycle management: discovery, analysis, prioritization, remediation, and risk acceptance
• Risk-based vulnerability prioritization using CVEs, CVSS, exploitability, and threat intelligence
• Vulnerability exception handling and compensating control assessment
• Vulnerability aging, SLA management, and remediation tracking
• Understanding of secure configuration, patching, and baseline compliance
• Familiarity with hybrid and cloud environments (Azure, AWS, or equivalent)
• Knowledge of endpoint and server hardening best practices
• Skill in critical thinking, analysis, mathematical calculations, and statistical evaluations
• Able to translate technical vulnerabilities into business and operational risk
• Able to communicate clearly and effectively, both verbally and in writing
• Able to apply technology solutions to business problems
• Able to work with accuracy and attention to detail
• Able to work in collaboration effectively and foster good teamwork
• Able to present ideas using language that is relatable to business and end-users
• Able to consider impact of actions and decisions on employees, coworkers, and customers
• Able to multi-task and problem solve
• Able to work independently and as part of a team
• Able to prioritize and meet deadlines
• Able to promote a team environment
• Able to present to diverse audiences from front line team members to senior management
• Able to perform task and duties without constant supervision
• Able to read, write, and speak English

An Equal Opportunity Employer including Disabled/Veterans