Sr. Specialist, Information Security

LG Energy Solution Michigan, Inc.

Troy (MI)

On-site

USD 110,000 - 170,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical, Dental, Vision premiums paid

Disability & life insurance paid by us

Generous PTO / Holidays

Diversity-friendly environment

401k retirement with company match

Job summary

LG Energy Solution Michigan Inc. is seeking a Senior Security Specialist with a strong IT infrastructure background to protect and continuously improve our enterprise technology environment.

The role blends hands-on infrastructure work with cybersecurity expertise across systems, networks, endpoints, identity and access management, cloud services, vulnerability management, security monitoring, and incident response.

Qualifications

Bachelor’s degree or equivalent professional experience in cybersecurity or IT.
5–8 years in IT security, infrastructure, or related fields.
Strong knowledge of Windows/Linux, AD, networking, and cloud environments.
Experience implementing and supporting enterprise security controls.
Familiarity with vulnerability management, patching, and infrastructure hardening.
Proven ability to analyze risk and communicate remediation steps clearly.

Responsibilities

Develop, implement, and maintain security controls for enterprise infrastructure and cloud.
Assess configurations to reduce attack surface and enforce baselines.
Lead secure configuration standards and system hardening.
Evaluate designs to ensure security controls are applied.
Provide guidance on security best practices and risk remediation.
Coordinate vulnerability identification, assessment, remediation, and validation.
Analyze scan results and prioritize findings by risk and impact.
Work with admins and cloud teams to drive timely remediation.
Support SIEM, EDR/XDR, logging, and threat detection enhancements.
Investigate security alerts and incidents, and lead post-incident improvements.
Communicate risks to stakeholders and develop remediation plans.
Document security policies and maintain technical procedures.

Skills

Security architecture

Vulnerability management

Incident response

Windows & Linux servers

Cloud security

SIEM/EDR/XDR

Networking

Education

Bachelor's degree in Cybersecurity/IT/CS or related field

Tools

Splunk

Tenable

EDR/XDR

NAC

DLP

Job description

LG Energy Solution Michigan Inc. (LGESMI) develops and manufactures large lithium-ion polymer batteries and packs for electric vehicle (EV) and energy storage applications. Come join the leader in advanced EV batteries!

Summary:

We are seeking an experienced Senior Security Specialist with a strong IT infrastructure background to help protect, secure, and continuously improve our organization’s enterprise technology environment. This role combines hands-on infrastructure knowledge with broad cybersecurity expertise across systems, networks, endpoints, identity and access management, cloud services, vulnerability management, security monitoring, and incident response. The Senior Security Specialist will work closely with IT infrastructure, networking, and business stakeholders to identify security risks, implement effective security controls, drive remediation efforts, and ensure security is integrated into technology operations and projects. The ideal candidate understands how enterprise infrastructure is designed, deployed, maintained, and supported and can apply that knowledge to identify vulnerabilities, strengthen security configurations, and develop practical solutions that protect critical systems without unnecessarily disrupting business operations. This position requires a proactive, technically strong security professional who can work independently, lead security initiatives, influence technical decisions, and serve as a trusted resource for enterprise security matters.

Responsibilities:

Enterprise Security and Infrastructure Protection
Develop, implement, and maintain security controls that protect enterprise infrastructure, systems, networks, endpoints, and cloud environments.
Assess infrastructure configurations and identify security weaknesses, misconfigurations, and opportunities to reduce the organization’s attack surface.
Establish and promote secure configuration standards, system hardening practices, and infrastructure security baselines.
Evaluate technology designs and infrastructure changes to ensure appropriate security controls are implemented.
Provide technical guidance on security best practices, infrastructure protection, and risk mitigation.
Vulnerability and Risk Management
Manage and coordinate vulnerability identification, assessment, prioritization, remediation, and validation across the enterprise.
Analyze vulnerability scan results and prioritize findings based on severity, exploitability, asset criticality, exposure, and business impact.
Work with system administrators, network engineers, and cloud teams to drive timely remediation.
Track remediation activities, document exceptions, and communicate outstanding risks to appropriate stakeholders.
Identify recurring security issues and recommend sustainable corrective actions.
Provide reporting on vulnerability trends, remediation performance, and overall infrastructure risk.
Security Operations and Incident Response
Investigate security alerts and suspicious activity involving enterprise systems, endpoints, identities, networks, and cloud resources.
Collaborate with security operations teams to investigate, contain, remediate, and document security incidents.
Support the use and continuous improvement of SIEM, EDR/XDR, logging, and threat detection capabilities.
Analyze security events, authentication anomalies, malware detections, unauthorized changes, and indicators of compromise.
Assist with incident response planning, root-cause analysis, recovery activities, and post-incident improvements.
Identify opportunities to improve detection coverage, response procedures, and security monitoring across infrastructure environments.
Coordinate technical remediation efforts with infrastructure and application support teams following security incidents.
Network, Endpoint, and Systems Security
Support endpoint and server protection through EDR/XDR, antivirus, device compliance, and security configuration management.
Identify unnecessary services, exposed ports, insecure protocols, and configuration issues that introduce risk.
Promote secure administration practices and protection of critical infrastructure assets.
Collaborate with technical teams to improve resilience, system integrity, and security visibility.
Security Governance, Compliance, and Risk Reduction
Support security assessments, internal audits, compliance reviews, and technical control evaluations.
Apply recognized security frameworks and practices, including NIST Cybersecurity Framework, CIS Controls, and ISO 27001, as applicable.
Maintain security standards, technical procedures, risk documentation, remediation records, and exception approvals.
Provide technical evidence and support for internal and external audits.
Assist in evaluating security risks associated with new technologies, vendors, infrastructure changes, and business initiatives.
Communicate technical risks and recommended corrective actions in a clear, actionable manner.
Contribute to continuous improvement of enterprise security policies, standards, and operating procedures.
Technical Leadership and Collaboration
Serve as a senior technical resource for infrastructure security and enterprise cybersecurity matters.
Lead or coordinate security remediation efforts and infrastructure security improvement initiatives.
Build strong working relationships with IT operations, networking, cloud engineering, application support, and business stakeholders.
Provide guidance to technical teams on security requirements, implementation approaches, and remediation strategies.
Communicate priorities, risks, and recommendations to technical and nontechnical audiences.
Develop and maintain technical documentation, procedures, and knowledge-sharing materials.
Promote a security-conscious culture and help integrate security into everyday IT operations.

Required Qualifications

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
5-8 years of experience in IT infrastructure, information security, cybersecurity engineering, systems administration, network engineering, or a related technical discipline.
Strong understanding of enterprise infrastructure, including Windows and Linux servers, Active Directory, networking, virtualization, and hybrid cloud environments.
Demonstrated experience implementing or supporting enterprise security controls.
Experience with vulnerability management, security remediation, patch management, and infrastructure hardening.
Working knowledge of network security, endpoint protection, identity security, authentication, and access management.
Familiarity with security monitoring, incident response, logging, and security investigation processes.
Understanding of security risk management, technical control assessments, and security best practices.
Ability to collaborate with infrastructure teams to implement security improvements.
Strong analytical, troubleshooting, documentation, communication, and problem-solving skills.
Ability to manage multiple priorities and drive technical issues through resolution.

Preferred Qualifications

Familiarity with security platforms such as Splunk, Tenable, EDR, NAC, DLP or comparable technologies.
Experience supporting enterprise security initiatives, technical risk assessments, audits, and compliance programs.
Knowledge of incident response, threat detection, threat hunting, and forensic investigation principles.
Experience with security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, or ISO 27001.
Relevant certifications such as CISSP, CISA, Security+, CySA+, or other Infrastructure and Security related certification.
Language: Korean Preferred (Optional).

Skills