Sr. Specialist, Information Security

LG Energy Solution Michigan, Inc. • Troy, MI

3d

About The Position

LG Energy Solution Michigan Inc. develops and manufactures large lithium-ion polymer batteries and packs for electric vehicle and energy storage applications. The Sr. Specialist, Information Security is an experienced security professional with a strong IT infrastructure background who protects and continuously improves the organization's enterprise technology environment. The position covers security across systems, networks, endpoints, identity and access management, cloud services, vulnerability management, security monitoring, and incident response.

The specialist works with IT infrastructure, networking, cloud, application support, and business stakeholders to identify security risks, implement controls, coordinate remediation, and integrate security into technology operations and projects. The role requires understanding how enterprise infrastructure is designed, deployed, maintained, and supported, and applying that knowledge to identify vulnerabilities, strengthen configurations, and develop practical security solutions. The specialist is expected to work independently, lead security initiatives, influence technical decisions, and serve as a trusted resource on enterprise security matters.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 5–8 years of experience in IT infrastructure, information security, cybersecurity engineering, systems administration, network engineering, or a related technical discipline.
• Strong understanding of enterprise infrastructure, including Windows and Linux servers, Active Directory, networking, virtualization, and hybrid cloud environments.
• Demonstrated experience implementing or supporting enterprise security controls.
• Experience with vulnerability management, security remediation, patch management, and infrastructure hardening.
• Working knowledge of network security, endpoint protection, identity security, authentication, and access management.
• Familiarity with security monitoring, incident response, logging, and security investigation processes.
• Understanding of security risk management, technical control assessments, and security best practices.
• Ability to collaborate with infrastructure teams to implement security improvements.
• Strong analytical, troubleshooting, documentation, communication, and problem-solving skills.
• Ability to manage multiple priorities and drive technical issues through resolution.

Nice To Haves

• Familiarity with security platforms such as Splunk, Tenable, EDR, NAC, DLP, or comparable technologies.
• Experience supporting enterprise security initiatives, technical risk assessments, audits, and compliance programs.
• Knowledge of incident response, threat detection, threat hunting, and forensic investigation principles.
• Experience with security frameworks such as NIST CSF, NIST SP 800-53, CIS Controls, or ISO 27001.
• Relevant certifications such as CISSP, CISA, Security+, CySA+, or another infrastructure- and security-related certification.
• Korean language proficiency is preferred but optional.

Responsibilities

• Develop, implement, and maintain security controls that protect enterprise infrastructure, systems, networks, endpoints, and cloud environments.
• Assess infrastructure configurations to identify security weaknesses, misconfigurations, and opportunities to reduce the attack surface.
• Establish and promote secure configuration standards, system-hardening practices, and infrastructure security baselines.
• Evaluate technology designs and infrastructure changes to ensure appropriate security controls are implemented.
• Provide technical guidance on security best practices, infrastructure protection, and risk mitigation.
• Manage and coordinate vulnerability identification, assessment, prioritization, remediation, and validation across the enterprise.
• Analyze vulnerability scan results and prioritize findings based on severity, exploitability, asset criticality, exposure, and business impact.
• Work with system administrators, network engineers, and cloud teams to drive timely remediation.
• Track remediation activities, document exceptions, and communicate outstanding risks to stakeholders.
• Identify recurring security issues and recommend sustainable corrective actions.
• Report on vulnerability trends, remediation performance, and overall infrastructure risk.
• Investigate security alerts and suspicious activity involving enterprise systems, endpoints, identities, networks, and cloud resources.
• Collaborate with security operations teams to investigate, contain, remediate, and document security incidents.
• Support the use and continuous improvement of SIEM, EDR/XDR, logging, and threat-detection capabilities.
• Analyze security events, authentication anomalies, malware detections, unauthorized changes, and indicators of compromise.
• Assist with incident response planning, root-cause analysis, recovery activities, and post-incident improvements.
• Identify opportunities to improve detection coverage, response procedures, and security monitoring across infrastructure environments.
• Coordinate technical remediation with infrastructure and application support teams following security incidents.
• Support endpoint and server protection through EDR/XDR, antivirus, device compliance, and security configuration management.
• Identify unnecessary services, exposed ports, insecure protocols, and configuration issues that introduce risk.
• Promote secure administration practices and protection of critical infrastructure assets.
• Collaborate with technical teams to improve resilience, system integrity, and security visibility.
• Support security assessments, internal audits, compliance reviews, and technical control evaluations.
• Apply recognized security frameworks and practices, including NIST Cybersecurity Framework, CIS Controls, and ISO 27001, as applicable.
• Maintain security standards, technical procedures, risk documentation, remediation records, and exception approvals.
• Provide technical evidence and support for internal and external audits.
• Assist in evaluating security risks associated with new technologies, vendors, infrastructure changes, and business initiatives.
• Communicate technical risks and recommended corrective actions clearly and actionably.
• Contribute to continuous improvement of enterprise security policies, standards, and operating procedures.
• Serve as a senior technical resource for infrastructure security and enterprise cybersecurity matters.
• Lead or coordinate security remediation efforts and infrastructure security improvement initiatives.
• Build strong working relationships with IT operations, networking, cloud engineering, application support, and business stakeholders.
• Guide technical teams on security requirements, implementation approaches, and remediation strategies.
• Communicate priorities, risks, and recommendations to technical and nontechnical audiences.
• Develop and maintain technical documentation, procedures, and knowledge-sharing materials.
• Promote a security-conscious culture and help integrate security into everyday IT operations.

Benefits

• 100% employer-paid medical, dental, and vision premiums for the employee and family.
• 100% employer-paid disability and life insurance.
• Generous paid time off and holidays.
• Opportunity to grow in a diverse work environment with a global company.
• 401(k) retirement savings and planning with a generous company match.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior