Senior Security Engineer

Intercity Packers Ltd.; Wyoming (MI); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Gordon Food Service is seeking a Senior Cybersecurity Engineer to lead SecOps, drive threat hunting, and automate security across enterprise, cloud, and hybrid environments.

You will design secure architectures, mentor analysts, and implement CI/CD and IaC for security workspaces, while advancing AI-enabled security workflows. Strong communication and leadership are essential.

Qualifications

• Bachelor's degree in computer science or related field is required.
• 5–8 years of relevant experience or equivalent mix of education and training.
• Professional certifications such as CISSP, CISM, GIAC, or CCSP are preferred.

Responsibilities

• Lead cybersecurity strategy, policies, and alignment with business goals.
• Drive threat hunting, detection engineering, and automation efforts.
• Design secure architectures across on-prem and cloud environments.
• Mentor SOC analysts and coordinate incident response activities.
• Develop detections and validate security controls to reduce false positives.
• Implement IaC and CI/CD pipelines for SecOps automation.
• Support AI-driven workflows and modern security tooling.

Skills

Security leadership

Threat hunting

Incident response

Automation

Security architecture

CI/CD automation

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Tools

SIEM

SOAR

EDR

NDR

Python

PowerShell

Bash

Job description

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There's a seat at our table for you...

Position Summary: The Senior Cybersecurity Engineer is a core technical leader within our Security Operations (SecOps) team, responsible for designing, automating, and maintaining the organization’s enterprise security architecture. Operating in a high-impact, low-friction environment, this role directly drives threat hunting, detection engineering, security validation, and tool automation across enterprise, cloud, and hybrid environments. This role balances deep platform infrastructure operations with modern automation techniques (CI/CD, Infrastructure-as-Code, AI workflows) to maximize defensive coverage and empower SOC analyst operations.

What you will do

• Security Strategy and Leadership: Provide strategic leadership in the development and execution of cybersecurity strategies, policies, and frameworks. Collaborate with senior stakeholders to align cybersecurity initiatives with organizational goals and objectives. Stay updated with emerging cybersecurity trends, threats, and technologies to provide expert guidance and recommendations.
• Threat Hunting & Threat Intelligence: Lead the SecOps threat hunting program across multi-platform operating systems, enterprise cloud environments, virtualized infrastructure, and network environments. Correlate open-source and proprietary threat intelligence (TTPs) into proactive, baseline, and reactive threat hunts. Maintain and expand automated hunt dashboards and threat hunting automation frameworks.
• Security Architecture and Engineering: Aid in designing, implementing, and maintaining secure network architectures and infrastructure. Maintain log ingestion pipelines, custom parsers, data normalization models, feed integrations, and overall platform health of the SIEM/SOAR environment. Collaborate with cross-functional teams to evaluate and select security technologies and solutions.
• Incident & Operational Response: Act as the Tier 2 technical escalation point and mentor for Security Analysts. Participate in critical Incident Response efforts, root-cause investigations, and the SecOps On-Call rotation. Conduct detailed investigations of security incidents, perform root cause analysis, and implement remediation measures.
• Detection Engineering & Security Validation: Design, build, and tune custom detections in vendor-neutral rule languages and native SIEM/SOAR/EDR logic to eliminate false positives while maintaining robust detection posture. Execute automated and manual threat emulation/attack chains using open-source testing frameworks to continuously validate log ingestion, rule efficacy, and security controls. Support external Red Team engagements and remediate identified visibility and control gaps.
• Security Automation & Infrastructure-as-Code (IaC): Build and manage Infrastructure-as-Code (IaC) configurations via version-controlled CI/CD pipelines for security workspaces and validation environments. Write, maintain, and integrate custom automation scripts (e.g., Python, PowerShell) and SOAR playbooks to streamline analyst triage and system workflows. Assist in developing, tuning, and integrating modern AI agent platforms and operational workflows into core SecOps pipelines.

When you will work

• Monday to Friday, 8am to 5pm
• Hybrid schedule, 4 days in office in Wyoming, MI or Atlanta, GA with 1 day remote

What you’ll bring to the table

• Bachelor’s Degree in Computer Science, Information Systems, or a related field required.
• Five to eight years previous related experience or an equivalent combination of education, training, and experience.
• Professional certifications such as CISSP, CISM, GIAC, or CCSP are preferred.
• Proficiency with engineering and administering Enterprise SIEM, SOAR, EDR, and NDR platforms.
• Extensive knowledge of cybersecurity principles, technologies, and best practices.
• Expertise with writing custom detection logic, complex queries, and log normalization.
• Strong understanding of enterprise IT infrastructure: Windows, Linux, Enterprise Cloud (IaaS/PaaS), Identity & Access Management (IAM), and Enterprise Networking.
• Experience writing automation scripts in Python, PowerShell, or Bash.
• Proficiency in security incident response, including forensic analysis, malware analysis, and threat intelligence.
• Demonstrated experience with threat hunting frameworks (e.g., MITRE ATT&CK) and security validation tools.
• Excellent leadership and communication skills, with the ability to effectively communicate complex technical concepts to stakeholders at all levels.
• Proven ability to lead and mentor junior team members.
• Must have good customer service and time management skills.
• Ability to develop solutions to a variety of complex problems, and reference established precedents and policies.

BE PART OF AN AMAZING CULTURE WHERE WHAT MATTERS TO YOU, MATTERS TO US! Gordon Food Service values our customers and understands that their success is largely dependent upon their workforce.

To demonstrate our commitment to our partnership, we will require any candidate who works for a Gordon Food Service customer to provide a letter of support from their management if they are selected for the interview process.

Equal Employment Opportunity is a matter of policy at Gordon Food Service, Inc. and we are committed to a work environment in which all individuals are treated with respect and dignity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or status as a qualified individual with disability.

If you require reasonable accommodation for any part of the application or hiring process due to a disability, please submit your request to [e-mail] and use the words "Accommodation Request" in your subject line.

All Gordon Food Service locations are tobacco-free. Gordon Food Service is a drug-free workplace and conducts pre-employment drug tests.

For more than 125 years, Gordon Food Service has delivered uncompromised quality and heartfelt service. From a butter-and-egg delivery service, it has grown into the largest family-operated foodservice business in North America. Today, the company serves customers from restaurants, to healthcare and education, across the U.S. and Canada through its distribution network and more than 180 retail stores.