Senior Cybersecurity Engineer

1160 N Mayflower Dr
Appleton, WI 54913, USA

Ready to help protect a growing supply chain leader? WSI is looking for a hands-on Senior Cybersecurity Engineer to strengthen vulnerability management, security operations, identity protection, and incident response. In this high-impact role, you’ll partner with IT and business leaders, mentor teams on security best practices, and help build a proactive security culture across the organization.

DUTIES AND ACCOUNTABILITIES:

• Administer and optimize our Rapid7 platform (InsightVM and Managed Detection & Response) to run the enterprise vulnerability management program across on-premises, cloud, and mixed Windows/Linux environments.
• Design and maintain a risk-based vulnerability prioritization framework, incorporating asset criticality, exploitability, and business context rather than age alone.
• Lead the weekly Vulnerability Management review cadence, producing remediation metrics and driving remediation timelines to closure with IT, Infrastructure, and business stakeholders.
• Maintain and mature the organization's CIS Critical Security Controls (CIS 18) program, tracking control implementation, identifying gaps, and prioritizing remediation roadmaps.
• Own and maintain the organization's Security Incident Response Plan, and lead its execution during security incidents identified through Rapid7 MDR (e.g., credential resets, session/MFA revocation, device isolation), including documentation of root cause and resolution.
• Monitor and manage the SSL certificate lifecycle across endpoints, proactively identifying and remediating expired or soon-to-expire certificates.
• Own the Security Awareness Program, including phishing simulation and reporting (Phish Alert) and associated metrics, to build a culture of security awareness across the organization.
• Review, develop, and maintain IT and security policies, standards, and procedures (e.g., the electronic use/acceptable use policy, data protection policy, and emerging areas such as AI usage policy), in partnership with the Director of Cybersecurity & Infrastructure.
• Own Zero Trust and Conditional Access policy design within Microsoft Entra , including MFA policy, identity protection alerting, and least-privilege role design.
• Review privileged access requests, applying least-privilege and risk-based decision-making, and conduct periodic access reviews for sensitive systems.
• Coordinate external penetration testing and vulnerability assessment engagements; validate, triage, and integrate findings into the vulnerability management program.
• Conduct proactive threat hunting to identify potential compromises, misconfigurations, and emerging risks ahead of formal alerts.
• Evaluate and select security and business applications/software prior to deployment, including endpoint/EDR tooling, by building vendor scoping documents, leading vendor evaluation sessions, and assessing third-party/vendor security risk.
• Produce and deliver a monthly security metrics and dashboard report to leadership summarizing vulnerability management, incident, and program status.
• Partner with leadership on annual planning to identify and prioritize the coming year's security initiatives.
• Partner with and mentor IT associates on security best practices, helping to elevate the organization's overall security posture.
• Support completion of cyber insurance renewal questionnaires and audit/compliance documentation requests.
• Collaborate with Infrastructure, Legal, HR, and external partners (auditors, MSSP/vendor partners) on security initiatives, incident response, and contractual or compliance requirements.

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

• Hands-on experience administering Rapid7 InsightVM and/or Rapid7 MDR, or a comparable enterprise vulnerability management/MDR platform.
• Working knowledge of security frameworks (such as CIS 18 or NIST CSF) and experience assessing or tracking control maturity.
• Experience designing and administering Zero Trust/Conditional Access policies, MFA, and identity protection within Microsoft Entra .
• Experience coordinating penetration tests or vulnerability assessments and translating findings into a prioritized remediation program.
• Solid understanding of infrastructure fundamentals (networking, Windows/Linux server administration, Active Directory/Entra ) sufficient to assess risk.
• Demonstrated experience developing, reviewing, or maintaining IT and security policies, standards, and procedures.
• Incident response experience, including credential/session remediation, endpoint isolation, and clear written documentation of findings.
• Experience evaluating third-party vendors, applications, or software from a security risk perspective.
• Strong analytical and problem-solving skills, with the ability to communicate technical risk clearly to both technical and non-technical stakeholders, including in monthly leadership reporting.
• Demonstrated ability to mentor or coach colleagues on security best practices.
• Ability to work independently and manage multiple…