Security Engineer III

Grainger Businesses•Aliso Viejo, CA

3d•$121,200 - $202,100•Onsite

About The Position

Help build the next stage of security at Grainger Frictionless, an AI-powered tracking solution for industrial supply, construction, and retail. Partner with IT, cloud, product, and Grainger security teams to strengthen defenses and advance compliance readiness as the business scales. The role evaluates and improves security controls across technology environments to protect information assets, systems, and business operations. It applies cybersecurity expertise to identify vulnerabilities, assess risks, recommend and implement safeguards, and support resolution of security issues. The position also contributes to security assessments, compliance readiness, and continuous improvement of security practices. The position is located at Grainger’s Aliso Viejo, California office and is onsite. It is not eligible for sponsorship now or in the future; candidates must be authorized to work in the United States now and for the foreseeable future.

Requirements

7+ years of cybersecurity or related IT/cloud security experience, including security improvements and compliance or audit readiness under a recognized framework.
Bachelor’s degree in a technology-related field or equivalent relevant experience; strong candidates without a degree will be considered.
In-depth knowledge of cybersecurity principles, security controls, and risk assessment practices for systems, applications, networks, devices, and information assets.
Ability to evaluate security configurations, technical vulnerabilities, assessment findings, and control gaps and recommend appropriate safeguards.
Knowledge of vulnerability management, security testing, remediation practices, and security investigations.
Ability to interpret security policies, standards, and recognized compliance frameworks and apply requirements to controls, documentation, and remediation.
Ability to analyze security issues, consider technical and operational factors, and exercise independent judgment in recommending practical improvements.
Ability to communicate risks, technical findings, and recommended controls to technical and nontechnical stakeholders and collaborate across teams.
Working knowledge of Microsoft Azure security controls, cloud configurations, and related security practices.
Knowledge of employee endpoints, field devices, office networks, firewalls, and connected technology environments.
Ability to interpret vulnerability-scanning and penetration-testing findings involving deployed custom software and coordinate remediation with development, cloud engineering, and corporate security teams.
Ability to apply requirements from ISO 27001, SOC 2, CMMC, PCI DSS, or similar frameworks to controls, remediation, and assessment evidence while balancing technical and operational constraints.
Authorization to work in the United States now and for the foreseeable future; sponsorship is not available.

Nice To Haves

Customer-facing software, vulnerability scanning, or penetration testing experience.
An advanced degree in technology or engineering.

Responsibilities

Assess cybersecurity risks across assigned systems, applications, networks, and infrastructure to identify vulnerabilities, security gaps, and threats to business operations and information assets.
Evaluate existing safeguards, recommend risk-based improvements, and partner with technical teams to support secure configurations and compliance with enterprise policies and standards.
Analyze security assessments, testing results, and vulnerabilities; prioritize findings by risk; and coordinate remediation with technical teams.
Collaborate with technology, infrastructure, application, and engineering teams to assess security requirements and proposed changes, recommending practical controls.
Lead assigned security assessments and compliance-readiness activities by identifying control gaps, coordinating remediation, and maintaining documentation and evidence for internal reviews, audits, and security frameworks.
Analyze security incidents and technical findings, recommend corrective actions, document results, and communicate risks and best practices to technical and business stakeholders.
Evaluate security across employee and field devices, office networks, firewalls, and related IT systems with Grainger security and Grainger Frictionless technical teams.
Assess Microsoft Azure resources and configurations with cloud engineering teams and recommend safeguards for Grainger Frictionless cloud environments.
Coordinate vulnerability scanning and penetration testing of deployed custom software and related technology with development, cloud, and corporate security teams; review findings and support remediation without owning application code.
Coordinate security-control and compliance-readiness activities involving applicable frameworks such as ISO 27001, SOC 2, CMMC, and PCI DSS, including identifying gaps, supporting remediation priorities, and gathering evidence.

Benefits

Medical, dental, vision, and life insurance coverage starting on day one.
Six free sessions each year with a licensed therapist.
18 paid time off days annually for full-time employees, prorated based on employment start date.
Six company holidays per year.
6% company contribution to a 401(k) Retirement Savings Plan each pay period, with no employee contribution required.
Employee discounts.
Tuition reimbursement.
Student loan refinancing.
Free access to financial counseling, education, and tools.
Maternity support programs and nursing benefits.
Up to 14 weeks of paid leave for birth parents and up to 4 weeks of paid leave for non-birth parents.
Incentive target of up to 10%, based on individual and company performance objectives.