Senior Security Engineer

GG BRANDS COMPANY•Sharonville, OH

4d•Onsite

About The Position

The Senior Security Engineer serves as The Gorilla Glue Company's primary technical cybersecurity expert. This hands-on role designs, implements, operates, and validates security controls across identity, endpoint, cloud, data protection, and security operations platforms. The position partners closely with Infrastructure, Service Desk, Data and AI Governance, and managed security providers to reduce risk, strengthen resilience, and continuously improve the company's cybersecurity posture.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
Five or more years of progressive experience in security engineering, cybersecurity operations, cloud security, identity security, or related technology disciplines.
Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services.
Experience with vulnerability management, technical incident response, security monitoring, and remediation validation.
Practical experience with PowerShell, KQL, APIs, or other scripting and automation technologies.
Deep working knowledge of Microsoft Entra ID, Conditional Access, MFA, PIM, Microsoft Defender XDR, and Microsoft Purview.
Strong understanding of identity and access management, endpoint security, cloud security, data protection, logging, and zero trust concepts.
Ability to troubleshoot complex security issues, assess technical risk, and design practical controls for hybrid environments.
Ability to work effectively with Infrastructure, Service Desk, application owners, data teams, vendors, and managed security providers.
Strong analytical, documentation, communication, and project execution skills.

Nice To Haves

Microsoft Cybersecurity Architect Expert (SC-100) preferred.
Microsoft Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), or Azure Security Engineer Associate (AZ-500) are beneficial.
CISSP or equivalent security certification is helpful but not required.

Responsibilities

Administer and continuously improve Microsoft Entra ID security controls, including Conditional Access, multifactor authentication, Privileged Identity Management, access reviews, and privileged-access hygiene.
Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads.
Design and implement Microsoft Purview controls supporting data classification, data loss prevention, information protection, and secure AI adoption.
Maintain strong working knowledge of SIEM integrations, security telemetry, KQL, and Microsoft Sentinel capabilities to support the managed detection environment.
Design and implement security controls across Microsoft 365, Azure, hybrid identity, endpoints, servers, cloud services, and business technology environments.
Perform security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services.
Develop security automation using PowerShell, KQL, APIs, and orchestration capabilities to improve consistency, visibility, and response speed.
Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls.
Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact.
Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends.
Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets.
Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned.
Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions.
Perform or support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events.
Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners.
Partner with Plant IT teams to strengthen cyber security posture of manufacturing and OT environments.
Assist in the design, implementation, and ongoing management of network segmentation and connected manufacturing technology.
Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies.
Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards.
Support Information Security polices, standards, and compliance, requirements.
Maintain security documentation, diagrams, and procedures.
Assist with vendor security reviews and risk assessments.
Support audits and cybersecurity assessments.