IT Security Engineer

Ken’s Foods, Inc.; Marlborough (MA); On-site; USD 120,000 - 130,000; Full time

Job summary

Ken’s Foods, Inc. in Marlborough, MA seeks a highly technical IT Security Engineer to build and mature our cybersecurity program, partnering with IT and OT teams to strengthen systems, networks, and controls.

This hands-on role focuses on investigations, vulnerability management, patching high‑risk assets, and collaborating with an MSSP SOC to protect manufacturing operations. Ideal candidates have 5–8+ years of security experience, strong AD/identity security, and proven threat modeling and

Qualifications

• 5–8+ years in IT security engineering, SOC, or incident response.
• Hands-on with Windows Server/client security, network/firewall security, endpoints.
• Strong knowledge of AD and identity security best practices.
• Experience with log analysis and security event triage.
• Comfort working with SOC alerts and vulnerability reports.
• Understanding of security frameworks (NIST CSF, CIS Controls, SOC 2).
• Excellent documentation habits and process orientation.

Responsibilities

• Review MSSP alerts to validate severity and actions.
• Investigate incidents and support containment and recovery.
• Harden Windows servers, clients, VMs, and IT infrastructure.
• Ensure secure configuration of endpoint protection.
• Collaborate to secure firewalls, switches, and network segments.
• Support network segmentation and least-privilege access.
• Lead patching and remediation for high-risk assets.
• Work with OT engineers on PLCs and ICS security controls.
• Monitor emerging threats affecting IT/OT environments.

Skills

Windows security

Network security

Endpoint security

MFA identity

Active Directory

Log analysis

Vulnerability management

SOC alerts

Job description

Summary

We are seeking a highly technical, hands-on IT Security Engineer to help build and mature the cybersecurity program of a food & beverage manufacturing organization. This role is ideal for a driven, detail-oriented engineer who enjoys hardening systems, securing networks, performing technical investigations, and working side-by-side with IT and OT teams to improve our security posture.

You will be the primary “hands-on keyboard” technical resource supporting cybersecurity initiatives and will partner closely with our IT teams, and our MSSP SOC.

Key Responsibilities

• Review alerts and escalations from the MSSP to validate severity, impact, and required actions.
• Conduct technical investigation steps and support containment, eradication, and recovery activities.
• Harden and secure Windows servers, Windows clients, virtual machines, and other IT infrastructure.
• Ensure secure configuration, deployment, and management of endpoint protection (SentinelOne).

• Collaborate with the IT infrastructure team to ensure secure configurations across firewalls, switches, and network segments.
• Support network security improvements such as segmentation, least privilege network access, and secure remote access.
• Perform firewall rule reviews and contribute to network hardening efforts.

• Support secure configuration of identity platforms.
• Enforce role-based access controls, privileged access hygiene, and identity hardening standards.

• Work with the MSSP to ensure vulnerability scans are properly executed and tuned.
• Validate findings, prioritize risk, and coordinate remediation work with system and network teams.
• Lead patching and configuration remediation efforts for high-risk assets.
• Work with developers to identify, prioritize, and fix security issues (OWASP Top 10).
• Conduct security reviews of applications and servers.

• Collaborate with OT engineers to understand legacy systems, PLCs, and plant-floor constraints and assist in implementation of OT network segmentation and ICS security controls.
• Actively monitor emerging threats affecting OT and IT environments.
• Conduct periodic threat modeling for high-risk applications and systems.

Required Qualifications

• 5–8+ years of experience in IT security engineering, SOC, or incident response roles.
• Strong hands-on experience with: Windows Server and client security; Network and firewall security; Endpoint security tools; MFA and identity systems.
• Strong knowledge of Active Directory and identity security best practices.
• Practical experience hardening servers, endpoints, and network devices.
• Familiarity with log analysis and security event triage.
• Comfort working directly with SOC alerts and vulnerability scan reports.
• Understanding of security frameworks (NIST CSF, CIS Controls, SOC 2).
• Strong documentation habits and process-oriented mindset.

Preferred Qualifications

• Experience in manufacturing, industrial, or OT/ICS environments.
• Working knowledge of PLCs, or ISA/IEC 62443 principles.
• Familiarity with Office 365 security configuration and best practices.
• Experience automating workflows using PowerShell or Python.
• Exposure to segmentation projects or Zero Trust principles.
• Relevant certifications: GSEC, GCED, GCIH, GDSA, GDAT, GICSP, GCIP, and GRID

Work Authorization Notice: Please note that we do not provide visa sponsorship or immigration support for this position. Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship.

The salary for this position is determined by a combination of experience, skills, and education level. The compensation range is $120K-130k annually.

#MCB