IT Security Specialist

The Step2 Company•Streetsboro, OH

2d•Hybrid

About The Position

Step2 is seeking an IT Security Specialist to lead its security strategy and perform hands-on work protecting users, systems, data, and sites. The position owns the security program end to end, including strategy, tools, vendors, training, and incident response, with a focus on adapting defenses to evolving threats, particularly those enabled by AI. The role is expected to question whether existing tools remain appropriate and develop new defenses when needed. The specialist will set security controls and strategy while the Senior Manager, IT Infrastructure & Operations administers the platforms. The role also covers endpoint security, secure development, vendor and third-party risk, security telemetry and reporting, policy and compliance, employee security awareness, business continuity, and physical site security. The position is hybrid and based in Streetsboro, Ohio, with work in office, plant, and warehouse environments and travel between Step2 sites. Standard business hours apply, with flexibility to respond quickly to critical outages or incidents, especially during peak selling seasons.

Requirements

At least 7 years of IT security experience, with both strategic and hands-on technical responsibility.
Demonstrated ability to adapt defenses to new threats and assess modern and AI-driven security tools on their merits.
A record of taking initiative to build or substantially improve a security program.
Current knowledge of AI-related threats and controls, and a habit of keeping up with the threat landscape.
Deep hands-on skills with Microsoft 365 security, Entra ID, EDR, SIEM or log tools, vulnerability scanning, firewalls, and VPNs.
Comprehensive experience with modern security-focused endpoint strategy and management, such as Microsoft Intune and Defender for Endpoint, including remote scanning, device and software inventory, threat detection and malware removal, and remote isolation and wipe.
Experience running a security operations center, internally or through an MSSP/MDR provider, including setting escalation rules and SLAs and reviewing performance.
Experience selecting and managing security vendors.
Experience writing and running incident response plans and tabletop exercises.
Experience building and testing business continuity and ransomware recovery plans.
Experience running a security awareness program, such as KnowBe4 or a similar platform.
Working knowledge of a security framework such as NIST CSF or CIS Controls.
Clear communication skills, including explaining risk to leadership and training non-technical staff.

Nice To Haves

CISSP, CISM, Security+, CySA+, or Microsoft SC-200/SC-300 certification.
Experience securing manufacturing or OT/plant networks.
SQL and scripting experience, such as PowerShell or Python, for automating checks and analyzing telemetry; Snowflake or Grafana experience.
Experience with Oracle E-Business Suite or Snowflake access controls.
Knowledge of AI security frameworks such as OWASP Top 10 for LLM Applications or NIST AI RMF.

Responsibilities

Track emerging threats, including AI-enabled phishing, deepfakes, social-engineering attacks, prompt injection, AI-tool data leakage, and vulnerabilities in AI agents and integrations; translate findings into security and business continuity strategy, a current tactical roadmap, and leadership risk briefings.
Set guardrails for employee and system use of AI tools, agents, and MCP connections; review AI tools and vendors for data exposure and access risk.
Own the incident response plan, playbooks, and courses of action; conduct tabletop exercises, lead incident response, and maintain a risk register with mitigation plans.
Build and test business continuity plans, including fast device rebuilds, Microsoft 365 and OneDrive data recovery, versioning, retention and backup, and regular recovery drills.
Define and verify security controls for MFA, conditional access and privileged accounts in Entra ID; Microsoft 365 settings; vulnerability management; firewall, VPN and segmentation rules, including plant networks; and employee and contractor access reviews.
Own the security strategy for employee laptops and mobile devices, treating devices as replaceable while keeping work data in OneDrive and Microsoft 365; run remote scans, maintain live device and software inventories, detect threats and unapproved software, remove malware, and remotely isolate or wipe compromised devices.
Work with the software development team to design and enable CI/CD pipelines with SAST, DAST, dependency scanning, and secrets scanning; cover vulnerabilities such as the OWASP Top 10 and CWE Top 25 and help developers remediate findings.
Select, implement, and manage security vendors and monitoring tools, including EDR, SIEM/MDR, email security, and vulnerability scanning; manage contracts, performance, and budget.
Consolidate security telemetry and logs into Snowflake for analysis and build dashboards and alerting, such as Grafana, to show risk, trends, and program performance.
Evaluate existing, proposed, and new vendors against Step2 security compliance thresholds before and after onboarding; apply least-privilege, time-limited access and MFA, and reassess vendors regularly.
Maintain current security policies and standards and support audits, cyber insurance requirements, and customer or retailer security questionnaires.
Run the KnowBe4 employee training and phishing simulation program; measure results, tailor content to actual threats and roles, and recommend program improvements.
Own building access control, including badges, door systems, visitor access, security monitoring, and CCTV across Step2 sites; manage systems and vendors, review access rights, and incorporate physical security events into incident response and telemetry.