Security Engineer, Cox Farms

BrightFarms Inc•Atlanta, GA

16h•$130,000 - $152,000

About The Position

Cox Farms is seeking an experienced Security Engineer to design, implement, and operate security controls that protect its people, systems, and operational technology across a growing multi-site agricultural business in North America. This role will have direct influence over the shape of the security operation as the business grows. The Security Engineer designs and implements security controls, standards, and procedures that protect Cox Farms systems, networks, and data. The role will serve as a hands-on technical resource across the Cox Farms, North American, security environment, owning the day-to-day administration, tuning, troubleshooting, and improvement of security technologies. Where the Director, IT Security sets program direction and policy, the Security Engineer builds and operates the infrastructure that makes it operate. The ideal candidate is a hands-on security professional who is comfortable working across a broad range of security technologies and responsibilities, from infrastructure and network security to monitoring, detection, and response. They should be technically strong, self-directed, and equally comfortable administering existing tools, troubleshooting issues, implementing new controls, and helping mature security practices as the organization grows.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field; or equivalent experience
2 years of experience in security engineering, security operations, or closely related technical security role
Hands-on experience deploying and administering SIEM platforms and building effective detection and alerting content
Proficiency with endpoint detection and response (EDR) tools, including platform configuration, policy tuning, and alert investigation
Working knowledge of identity security, including: Entra ID, conditional access, privileged access management, and MFA implementation
Experience with vulnerability scanning platforms, such as Qualys, Tenable, or equivalent, including scan configuration and results interpretation
Strong understanding of common attack techniques and the ability to identify and investigate indicators of compromise
Ability to communicate security findings and risk clearly to both technical peers and non-technical stakeholders

Nice To Haves

3+ years of experience in security engineering, security operations, or closely related technical security role
Expertise in an environment with operational technology, industrial control systems, or facility automation where IT/OT security boundaries are a real consideration
Demonstrated proficiency with CrowdStrike Falcon Complete or similar managed detection and response platforms, including alert investigation, policy configuration, detection tuning, and coordination of response activities. Experience with network security monitoring and the ability to interpret packet captures and flow data
Background building security tooling and processes in a growth-stage and/or developing security environment. CompTIA CySA+, GIAC GCED, CISSP, Microsoft Security certifications, or equivalent

Responsibilities

Deploy, administer, and continuously tune security tooling including: SIEM, EDR/endpoint protection, email security platforms, and network security appliances
Own the day-to-day operation of the vulnerability management program including scan configurations, results analysis, remediation prioritization and tracking with infrastructure teams
Implement and maintain identity and access management controls including conditional access policies, MFA enforcement, and access review processes in coordination with the Security Lead
Configure and maintain the Microsoft security stack including Defender for Endpoint, Defender for Identity, and Entra ID security policies
Monitor security alerts across all platforms; investigate, triage, and escalate incidents according to established playbooks
Review cybersecurity assessments and technical findings to identify security gaps and support remediation efforts
Perform technical security assessments and control testing to validate the effectiveness of security measures
Assist with report writing related to investigations of information security breaches or network evaluations to identify or implement solutions to information security problems
Support incident response activities including log analysis, evidence collection, containment actions, and post-incident documentation
Implement and maintain security configurations for OT/IT boundary controls across greenhouse and facility environments
Develop and maintain security runbooks, standard operating procedures, and configuration documentation
Support phishing simulation programs, security awareness activities, and user security communications. Provide security-related technical support to Cox Farms’ computer users