IT Security Engineer

Ken's Foods; Marlborough (MA); On-site; USD 120,000 - 130,000; Full time

Job summary

Ken's Foods is seeking a highly technical IT Security Engineer to build and mature our cybersecurity program within a food & beverage manufacturing setting. This hands-on role partners with IT and OT teams, MSSP SOC, and developers to harden systems, secure networks, and remediate threats.

You will review alerts, investigate incidents, and drive vulnerability management, patching, and secure configurations across Windows servers, clients, VMs, and network devices.

Qualifications

• 5–8+ years in IT security engineering, SOC, or incident response roles.
• Hands-on experience with Windows Server/client security and network/firewall security.
• Strong knowledge of Active Directory and identity security best practices.
• Experience hardening servers, endpoints, and network devices.
• Familiarity with log analysis and security event triage.
• Comfort working with SOC alerts and vulnerability reports.
• Understanding of NIST CSF, CIS Controls, and SOC 2.

Responsibilities

• Review MSSP alerts to validate severity and actions.
• Lead technical investigations for containment, eradication, and recovery.
• Harden Windows servers/clients, VMs, and IT infrastructure.
• Ensure secure endpoint protection configuration (SentinelOne).
• Collaborate on secure firewall, network, and segment configurations.
• Support network security improvements and remote access security.
• Perform firewall rule reviews and network hardening efforts.
• Manage identity security controls and RBAC hygiene.
• Coordinate vulnerability scans with MSSP and teams.
• Lead remediation for high-risk assets and deployments.
• Work with developers to address OWASP Top 10 findings.
• Review security of applications and servers; OT/ICS coordination.

Skills

Windows security

Network security

Endpoint security

MFA & identity systems

Active Directory

Security frameworks

Documentation practices

Tools

SentinelOne

Job description

SummaryWe are seeking a highly technical, hands‑on IT Security Engineer to help build and mature the cybersecurity program of a food & beverage manufacturing organization. This role is ideal for a driven, detail-oriented engineer who enjoys hardening systems, securing networks, performing technical investigations, and working side‑by‑side with IT and OT teams to improve our security posture.

You will be the primary “hands‑on keyboard” technical resource supporting cybersecurity initiatives and will partner closely with our IT teams, and our MSSP SOC.

Key Responsibilities

• Review alerts and escalations from the MSSP to validate severity, impact, and required actions.
• Conduct technical investigation steps and support containment, eradication, and recovery activities.
• Harden and secure Windows servers, Windows clients, virtual machines, and other IT infrastructure.
• Ensure secure configuration, deployment, and management of endpoint protection (SentinelOne).
• Collaborate with the IT infrastructure team to ensure secure configurations across firewalls, switches, and network segments.
• Support network security improvements such as segmentation, least privilege network access, and secure remote access.
• Perform firewall rule reviews and contribute to network hardening efforts.
• Support secure configuration of identity platforms.
• Enforce role‑based access controls, privileged access hygiene, and identity hardening standards.
• Work with the MSSP to ensure vulnerability scans are properly executed and tuned.
• Validate findings, prioritize risk, and coordinate remediation work with system and network teams.
• Lead patching and configuration remediation efforts for high‑risk assets.
• Work with developers to identify, prioritize, and fix security issues (OWASP Top 10).
• Conduct security reviews of applications and servers.
• Collaborate with OT engineers to understand legacy systems, PLCs, and plant‑floor constraints and assist in implementation of OT network segmentation andICS security controls.
• Actively monitor emerging threats affecting OT and IT environments.
• Conduct periodic threat modeling for high‑risk applications and systems.

Required Qualifications

• 5–8+ years of experience in IT security engineering, SOC, or incident response roles.
• Strong hands‑on experience with: Windows Server and client security; Network and firewall security; Endpoint security tools; MFA and identity systems.
• Strong knowledge of Active Directory and identity security best practices.
• Practical experience hardening servers, endpoints, and network devices.
• Familiarity with log analysis and security event triage.
• Comfort working directly with SOC alerts and vulnerability scan reports.
• Understanding of security frameworks (NIST CSF, CIS Controls, SOC 2).
• Strong documentation habits and process‑oriented mindset.

Preferred Qualifications

• Experience in manufacturing, industrial, or OT/ICS environments.
• Working knowledge of PLCs, or ISA/IEC 62443 principles.
• Familiarity with Office 365 security configuration and best practices.
• Experience automating workflows using PowerShell or Python.
• Exposure to segmentation projects or Zero Trust principles.
• Relevant certifications: GSEC, GCED, GCIH, GDSA, GDAT, GICSP, GCIP, and GRID

Work Authorization Notice

Please note that we do not provide visa sponsorship or immigration support for this position. Applicants must already be authorized to work in the United States on a full‑time, permanent basis without the need for current or future sponsorship.

The salary for this position is determined by a combination of experience, skills, and education level. The compensation range is $120K-130k annually.

#MCB