Sr. IT Security Manager

Weber Blackstone

Providence (UT)

In loco

USD 140.000 - 157.000

Tempo pieno

8 giorni fa

Una candidatura completa in un minuto

Curriculum e lettera di presentazione personalizzati, pronti da inviare.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Medical, dental, and vision coverage

Life and disability insurance

Employee Assistance Program (EAP)

401(k) with company match

Paid time off (vacation, sick, PTO)

Descrizione del lavoro

Weber Blackstone is seeking a hands-on Security Operations Lead to join our Utah-based team. You will run detection, response, vulnerability management, identity controls, and the tools that power them, partnering with managed providers and cross-functional IT teams.

In this role you’ll supervise 2–3 security engineers, develop incident response playbooks, lead risk and compliance activities, and communicate risks to non-technical stakeholders while advancing security postures across on-prem and

Competenze

6+ years in IT security or security-focused infrastructure roles.
3+ years leading people, teams or projects.
Bachelor's degree in computer science, information systems or related field, or equivalent experience.
Hands-on experience with EDR, SIEM and email security tools, and investigating real incidents.
Knowledge of SSO, MFA, AD/Entra ID and privileged access.
Experience running a vulnerability management program with scanning tools and patch tracking.
Familiarity with NIST CSF or CIS Controls and PCI DSS / IT audits.
Experience with managed security providers and enforcing SLAs.
Clear written and verbal communication for non-technical audiences.

Mansioni

Manage daily security operations and incident response with MDR/MSSP partners.
Triage alerts from EDR, SIEM, email security and cloud tools; tune rules to reduce noise.
Lead incident response for most incidents; keep playbooks current.
Run tabletop exercises and post-incident reviews; track actions to closure.
Run vulnerability scanning and patch tracking across servers, endpoints, and cloud.
Coordinate penetration tests and verify fixes.
Administer SSO, MFA and privileged access controls; unify identity across environments.
Gather evidence and remediate findings for PCI DSS, ITGC and audits.
Lead security awareness training and phishing simulations for offices and plants.

Conoscenze

IT security

Team leadership

Incident response

Vulnerability management

Identity & access

Security frameworks

Vendor management

Communication

Formazione

Bachelor's degree or equivalent

Strumenti

CrowdStrike Falcon

Microsoft Defender

Splunk

Microsoft 365 security

Google Workspace security

Descrizione del lavoro

At Weber Blackstone, we believe the best moments happen outdoors while enjoying delicious food with your favorite people. We lead the industry in innovation, design, and consumer delight, and we're fueled by people who are curious, bold, and collaborative. Whether you're a seasoned pro or exploring a new craft, we want Weber Blackstone to be the spark that ignites your next career move. Join us on our journey to create world class products that redefine and reimagine outdoor cooking and deliver exceptional experiences for generations to come. Come be part of our BBQ!

About the role

We are bringing two companies' systems, people and partners onto one secure foundation. You will run the security operations that make that work: monitoring, response, vulnerability management, identity controls and the tools behind them.

You will work closely with the Sr. Director, IT Security & Infrastructure, who sets strategy and owns executive reporting, and turn that strategy into working controls. This is a hands on role: you will lead the team and still investigate alerts, tune tools and run incidents yourself.

What you'll do

Security operations and incident response

Manage daily detection and response, working with our managed security partner (MDR/MSSP) and escalating as needed.
Triage and investigate alerts from EDR, SIEM, email security and cloud tools; tune rules to cut noise.
Lead incident response for most incidents, and support the Sr. Director on major ones; keep playbooks current.
Run tabletop exercises and post-incident reviews, and track follow-up actions to closure.

Vulnerability and infrastructure security

Run vulnerability scanning and patch tracking across servers, endpoints, network and cloud, with clear remediation SLAs.
Coordinate penetration tests and verify fixes.
Maintain secure configuration baselines for endpoints, servers, firewalls and cloud accounts.
Partner with Operations on basic protections for plant and warehouse systems (OT).

Identity and access

Administer SSO, MFA and privileged access controls, and help unify identity across the Weber and Blackstone environments.
Run quarterly access reviews and improve joiner-mover-leaver processes with HR and IT.

Risk and compliance support

Gather evidence and remediate findings for PCI DSS, IT general controls and other audits.
Complete security reviews of new vendors and SaaS tools against our third-party risk standard.
Keep security policies and procedures up to date, and propose changes to the Sr. Director.
Produce monthly security metrics: open vulnerabilities, incidents, patch compliance and phishing results.

Team and awareness

Lead, coach and schedule a team of 2-3 security engineers and analysts, including on-call coverage.
Run security awareness training and phishing simulations for offices, plants and distribution centers.
Be the go-to security contact for IT, Engineering and business teams on day-to-day questions.

What you bring

6+ years in IT security or security-focused infrastructure roles, including 3+ years leading people, a team or major projects.
Bachelor's degree in computer science, information systems or a related field, or equivalent experience.
Hands-on experience with EDR, SIEM and email security tools, and with investigating and containing real incidents.
Working knowledge of identity and access management: SSO, MFA, Active Directory or Entra ID, and privileged access.
Experience running a vulnerability management program with scanning tools and patch tracking.
Familiarity with security frameworks such as NIST CSF or CIS Controls, and with supporting PCI DSS or IT audits.
Experience working with managed security providers and holding them to service levels.
Clear writer and communicator who can explain risk to non-technical colleagues.

Nice to have

Experience during a merger or acquisition, especially consolidating tools and identities across two IT environments.
Experience in consumer products, manufacturing or retail, including exposure to OT or plant networks.
Hands-on experience with CrowdStrike Falcon, Microsoft Defender, Splunk or similar platforms, and with Microsoft 365 or Google Workspace security.
Cloud security experience in AWS, Azure or GCP.
Scripting or automation skills (PowerShell, Python) for investigations and routine security tasks.
Certifications such as CISSP

Benefits: