Senior Security Engineer

GORILLA GLUE COMPANY; Sharonville (OH); Presencial; USD 120.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Competitive compensation

Descripción de la vacante

The Gorilla Glue Company is seeking a Senior Security Engineer to serve as the primary cybersecurity expert. You will design, implement, and validate controls across identity, endpoints, cloud, data protection, and security operations.

You will lead security engineering, incident response, and governance efforts, collaborating with Infrastructure, Service Desk, and providers to strengthen resilience and reduce risk. A Bachelor's degree and 5+ years of relevant experience are required.

Formación

• Bachelor's degree or equivalent professional experience in a related field.
• Five+ years of progressive experience in security engineering or cybersecurity operations.
• Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services.
• Experience with vulnerability management, incident response, security monitoring, and remediation validation.
• Proficient with PowerShell, KQL, APIs, or automation technologies.

Responsabilidades

• Administer and improve Microsoft Entra ID security controls (CA, MFA, PIM, access reviews).
• Configure Defender across endpoints, identity, email, and cloud workloads.
• Design and implement Microsoft Purview controls for data protection and secure AI support.
• Architect security controls across Microsoft 365, Azure, and hybrid environments.
• Lead vulnerability prioritization and remediation with stakeholders.
• Provide leadership during investigations, coordinate with MDR/SOC providers, and translate findings into remediation actions.
• Collaborate with plant IT to secure OT and manufacturing environments.
• Support governance, risk, and compliance activities including vendor security reviews.

Conocimientos

Identity security

Cloud security

MFA/PIM/CA concepts

Incident response

Security engineering

Threat detection

Educación

Bachelor's degree in Cybersecurity / IT / CS / Engineering

Herramientas

PowerShell

KQL

APIs

Microsoft Defender XDR

Descripción del empleo

Summary DescriptionThe Senior Security Engineer serves as The Gorilla Glue Company's primary technical cybersecurity expert. This hands-on role designs, implements, operates, and validates security controls across identity, endpoint, cloud, data protection, and security operations platforms. The position partners closely with Infrastructure, Service Desk, Data and AI Governance, and managed security providers to reduce risk, strengthen resilience, and continuously improve the company's cybersecurity posture.What's in it for you?Thanks to our commitment to creating a supportive and engaged workplace culture, Gorilla Glue has been recognized as a top place to work for 16 years in a row. We offer competitive compensation packages, comprehensive healthcare benefits, and other perks and incentives to ensure our employees feel valued and supported.Joining the Gorilla Glue family means being part of a team passionate about building strong brands and promoting a culture of excellence. As an employee, you'll be able to help create high-quality products and build brands that people love. Join us in an inspiring workplace where you can belong, grow, and make a difference!What will your day look like?Microsoft Security Platform Ownership• Administer and continuously improve Microsoft Entra ID security controls, including Conditional Access, multifactor authentication, Privileged Identity Management, access reviews, and privileged-access hygiene.• Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads.• Design and implement Microsoft Purview controls supporting data classification, data loss prevention, information protection, and secure AI adoption.• Maintain strong working knowledge of SIEM integrations, security telemetry, KQL, and Microsoft Sentinel capabilities to support the managed detection environment.Security Engineering & Architecture• Design and implement security controls across Microsoft 365, Azure, hybrid identity, endpoints, servers, cloud services, and business technology environments.• Perform security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services.• Develop security automation using PowerShell, KQL, APIs, and orchestration capabilities to improve consistency, visibility, and response speed.• Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls.Vulnerability & Exposure Management• Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact.• Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends.• Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets.Security Operations & Incident Response• Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned.• Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions.• Perform or support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events.• Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners.OT/Manufacturing Security• Partner with Plant IT teams to strengthen cyber security posture of manufacturing and OT environments.• Assist in the design, implementation, and ongoing management of network segmentation and connected manufacturing technology.• Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies.• Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards.Governance, Risk & Compliance• Support Information Security polices, standards, and compliance, requirements.• Maintain security documentation, diagrams, and procedures.• Assist with vendor security reviews and risk assessments• Support audits and cybersecurity assessmentsWhat you bring to the table:Education & Experience• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.• Five or more years of progressive experience in security engineering, cybersecurity operations, cloud security, identity security, or related technology disciplines.• Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services.• Experience with vulnerability management, technical incident response, security monitoring, and remediation validation.• Practical experience with PowerShell, KQL, APIs, or other scripting and automation technologies.Knowledge, Skills & Abilities• Deep working knowledge of Microsoft Entra ID, Conditional Access, MFA, PIM, Microsoft Defender XDR, and Microsoft Purview.• Strong understanding of identity and access management, endpoint security, cloud security, data protection, logging, and zero trust concepts.• Ability to troubleshoot complex security issues, assess technical risk, and design practical controls for hybrid environments.• Ability to work effectively with Infrastructure, Service Desk, application owners, data teams, vendors, and managed security providers.• Strong analytical, documentation, communication, and project execution skills.Preferred Certifications• Microsoft Cybersecurity Architect Expert (SC-100) preferred.• Microsoft Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), or Azure Security Engineer Associate (AZ-500) are beneficial.• CISSP or equivalent security certification is helpful but not required.Company Values:Must adhere to The Gorilla Glue Company’s Core Values that ensure everyone works together to exceed expectations.• Have fun, be passionate and show it!• Act with integrity and respect in all relationships.• Communicate openly and appreciate the effort of others.• Embrace knowledge, growth, and change.• Strive for excellence in what we do every day!