Senior Cybersecurity Engineer

Warehouse Specialists, Inc.; Appleton (WI); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with employer match

Paid time off

Wellness programs

Job summary

Warehouse Specialists, Inc. is seeking a hands-on Senior Cybersecurity Engineer to strengthen vulnerability management, security operations, identity protection, and incident response.

The role partners with IT and business leaders, mentors teams, and helps foster a proactive security culture across the organization. The ideal candidate will administer Rapid7 InsightVM/MDR, design risk-based prioritization, and lead security policy development while aligning with CIS Controls and NIST CSF.

Qualifications

• Hands-on experience with Rapid7 InsightVM and MDR or similar enterprise platforms.
• Knowledge of CIS 18/NIST CSF frameworks and control maturity assessment.
• Experience designing Zero Trust/Conditional Access policies and MFA in Entra ID.
• Ability to coordinate penetration tests and translate findings into remediation.

Responsibilities

• Administer Rapid7 InsightVM/MDR across on-prem, cloud, and mixed environments.
• Develop risk-based vulnerability prioritization with business context.
• Lead vulnerability review cadences and remediation timelines.
• Maintain CIS 18 program, mappings, and remediation roadmaps.
• Own Incident Response Plan and lead execution with MDR findings.
• Manage SSL certificate lifecycle and security awareness initiatives.
• Review/ Develop IT security policies with leadership.

Skills

Rapid7 InsightVM/MDR

Zero Trust

Entra ID/MFA

Incident response

Vulnerability management

Security policies

Mentoring

Risk communication

Education

Senior cybersecurity experience (5+ yrs)

Certifications preferred (CISSP/CISM/CCSP/S+, etc.)

Tools

Microsoft Entra ID

Active Directory

Rapid7 platform administration

Job description

1160 N Mayflower Dr
Appleton, WI 54913, USA

Description

Ready to help protect a growing supply chain leader? WSI is looking for a hands-on Senior Cybersecurity Engineer to strengthen vulnerability management, security operations, identity protection, and incident response. In this high-impact role, you’ll partner with IT and business leaders, mentor teams on security best practices, and help build a proactive security culture across the organization.

DUTIES AND ACCOUNTABILITIES:

• Administer and optimize our Rapid7 platform (InsightVM and Managed Detection & Response) to run the enterprise vulnerability management program across on-premises, cloud, and mixed Windows/Linux environments.


• Design and maintain a risk-based vulnerability prioritization framework, incorporating asset criticality, exploitability, and business context rather than age alone.


• Lead the weekly Vulnerability Management review cadence, producing remediation metrics and driving remediation timelines to closure with IT, Infrastructure, and business stakeholders.


• Maintain and mature the organization's CIS Critical Security Controls (CIS 18) program, tracking control implementation, identifying gaps, and prioritizing remediation roadmaps.


• Own and maintain the organization's Security Incident Response Plan, and lead its execution during security incidents identified through Rapid7 MDR (e.g., credential resets, session/MFA revocation, device isolation), including documentation of root cause and resolution.


• Monitor and manage the SSL certificate lifecycle across endpoints, proactively identifying and remediating expired or soon-to-expire certificates.


• Own the Security Awareness Program, including phishing simulation and reporting (PhishAlert) and associated metrics, to build a culture of security awareness across the organization.


• Review, develop, and maintain IT and security policies, standards, and procedures (e.g., the electronic use/acceptable use policy, data protection policy, and emerging areas such as AI usage policy), in partnership with the Director of Cybersecurity & Infrastructure.


• Own Zero Trust and Conditional Access policy design within Microsoft Entra ID, including MFA policy, identity protection alerting, and least-privilege role design.


• Review privileged access requests, applying least-privilege and risk-based decision-making, and conduct periodic access reviews for sensitive systems.


• Coordinate external penetration testing and vulnerability assessment engagements; validate, triage, and integrate findings into the vulnerability management program.


• Conduct proactive threat hunting to identify potential compromises, misconfigurations, and emerging risks ahead of formal alerts.


• Evaluate and select security and business applications/software prior to deployment, including endpoint/EDR tooling, by building vendor scoping documents, leading vendor evaluation sessions, and assessing third-party/vendor security risk.


• Produce and deliver a monthly security metrics and dashboard report to leadership summarizing vulnerability management, incident, and program status.


• Partner with leadership on annual planning to identify and prioritize the coming year's security initiatives.


• Partner with and mentor IT associates on security best practices, helping to elevate the organization's overall security posture.


• Support completion of cyber insurance renewal questionnaires and audit/compliance documentation requests.


• Collaborate with Infrastructure, Legal, HR, and external partners (auditors, MSSP/vendor partners) on security initiatives, incident response, and contractual or compliance requirements.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

• Hands-on experience administering Rapid7 InsightVM and/or Rapid7 MDR, or a comparable enterprise vulnerability management/MDR platform.


• Working knowledge of security frameworks (such as CIS 18 or NIST CSF) and experience assessing or tracking control maturity.


• Experience designing and administering Zero Trust/Conditional Access policies, MFA, and identity protection within Microsoft Entra ID.


• Experience coordinating penetration tests or vulnerability assessments and translating findings into a prioritized remediation program.


• Solid understanding of infrastructure fundamentals (networking, Windows/Linux server administration, Active Directory/Entra ID) sufficient to assess risk.


• Demonstrated experience developing, reviewing, or maintaining IT and security policies, standards, and procedures.


• Incident response experience, including credential/session remediation, endpoint isolation, and clear written documentation of findings.


• Experience evaluating third-party vendors, applications, or software from a security risk perspective.


• Strong analytical and problem-solving skills, with the ability to communicate technical risk clearly to both technical and non-technical stakeholders, including in monthly leadership reporting.


• Demonstrated ability to mentor or coach colleagues on security best practices.


• Ability to work independently and manage multiple competing priorities in a fast-paced environment.

PREFERRED EDUCATION AND EXPERIENCE:

• 5+ years of experience in a dedicated cybersecurity role, ideally including vulnerability management and MDR/SIEM operations.


• One or more of the following certifications preferred: Security+, CISSP, CISM, or CCSP.


• Experience evaluating and scoping security tooling or vendor solutions.

PHYSICAL CAPABILITIES AND REQUIREMENTS:

• Sitting at a desk or standing at a workstation for extended periods (often 6 to 8 hours a day).


• Close visual acuity to view computer monitors, analyze data, and review security logs and technical documentation.


• Frequent use of hands, wrists, and fingers for typing, operating a mouse, and handling phone equipment.


• Ability to clearly speak, hear, and exchange information verbally and in writing with team members and stakeholders.

BENEFITS AND TOTAL REWARDS:

• Competitive wages, and opportunities for advancement.


• Medical, Dental, Vision, Critical Illness, Accident, and Flexible Spending Plans available.


• Company-paid Short/Long-term Disability, Life Insurance, and Employee Assistance plans.


• Company-paid Time-Off (PTO), Sick Leave, and Holiday Pay.


• Retirement 401(k) Plan with Discretionary Employer Match, and Profit Sharing.


• Wellness Programs, Clothing Allowance, Safety Shoes, and Safety Glasses Reimbursement.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.