Sr. IT Security Manager

Weber Blackstone•Logan, UT

2d•$140,000 - $165,000

About The Position

Weber Blackstone is bringing two companies' systems, people and partners onto one secure foundation. The Sr. IT Security Manager runs security operations across monitoring, incident response, vulnerability management, identity controls and the tools behind them. Working closely with the Sr. Director, IT Security & Infrastructure, who sets strategy and owns executive reporting, this hands-on role translates strategy into operational controls. The manager leads the security team while also investigating alerts, tuning tools and handling incidents.

Requirements

At least 6 years in IT security or security-focused infrastructure roles, including at least 3 years leading people, a team or major projects.
Bachelor's degree in computer science, information systems or a related field, or equivalent experience.
Hands-on experience with EDR, SIEM and email security tools, and investigating and containing real incidents.
Working knowledge of identity and access management, including SSO, MFA, Active Directory or Entra ID, and privileged access.
Experience running a vulnerability management program with scanning tools and patch tracking.
Familiarity with security frameworks such as NIST CSF or CIS Controls, and supporting PCI DSS or IT audits.
Experience working with managed security providers and holding them to service levels.
Clear writing and communication skills, including explaining risk to non-technical colleagues.

Nice To Haves

Experience during a merger or acquisition, especially consolidating tools and identities across two IT environments.
Experience in consumer products, manufacturing or retail, including exposure to OT or plant networks.
Hands-on experience with CrowdStrike Falcon, Microsoft Defender, Splunk or similar platforms, and Microsoft 365 or Google Workspace security.
Cloud security experience in AWS, Azure or GCP.
Scripting or automation skills in PowerShell or Python for investigations and routine security tasks.
Certifications such as CISSP.

Responsibilities

Manage daily detection and response with the managed security partner (MDR/MSSP), escalating issues as needed.
Triage and investigate alerts from EDR, SIEM, email security and cloud tools, and tune rules to reduce noise.
Lead response for most incidents, support the Sr. Director on major incidents, and maintain incident response playbooks.
Run tabletop exercises and post-incident reviews, and track follow-up actions through completion.
Run vulnerability scanning and patch tracking across servers, endpoints, network and cloud, with clear remediation SLAs.
Coordinate penetration tests and verify that identified issues are fixed.
Maintain secure configuration baselines for endpoints, servers, firewalls and cloud accounts.
Partner with Operations on basic protections for plant and warehouse systems (OT).
Administer SSO, MFA and privileged access controls, and help unify identity across the Weber and Blackstone environments.
Run quarterly access reviews and improve joiner–mover–leaver processes with HR and IT.
Gather evidence and remediate findings for PCI DSS, IT general controls and other audits.
Review new vendors and SaaS tools against the third-party risk standard.
Maintain security policies and procedures and propose changes to the Sr. Director.
Produce monthly security metrics covering open vulnerabilities, incidents, patch compliance and phishing results.
Lead, coach and schedule a team of 2–3 security engineers and analysts, including on-call coverage.
Run security awareness training and phishing simulations for offices, plants and distribution centers.
Serve as the go-to security contact for IT, Engineering and business teams on day-to-day questions.