Security Engineer - Identity and Endpoint security

At WK Kellogg Co, we exist to create joy and connection to inspire Gr-r-reat days. We believe that doing good is always good for business and we have stood for this since Kellogg Company was founded more than 120 years ago. We are passionate about doing our part to make nutritious foods, create social connectivity and respect natural resources. Together, these actions create positive progress for people and the planet - today and for years to come.

We have big plans for how we are going to accomplish this, and we would love for you to join us in this effort.

The Security Engineer - Identity and Endpoint security role, you will be a key player in keeping our users, data, and systems protected - with a specific focus on identity security, endpoint protection, and security monitoring. You will work across our security tooling stack to investigate threats, drive improvements, and build smarter ways to protect the organization through automation.

This is a great opportunity for someone who thrives in a fast-paced environment, enjoys solving complex security puzzles, and wants to make a real impact without being buried in bureaucracy.

HERE'S WHAT YOU'LL BE DOING

Identity & Access Security

* Manage and monitor our identity platform (Microsoft Entra ) - including user access, privileged accounts, and authentication policies

* Support the administration and day-to-day operations of Cyber Ark for privileged access management, including vault configurations, session monitoring, and access reviews

* Partner with IT and engineering teams to enforce least-privilege access and improve identity hygiene across the environment

* Investigate identity-related alerts, unusual sign-in activity, and potential account compromises

Security Monitoring & Threat Detection

* Work within Microsoft XDR (Defender suite) to monitor, triage, and respond to security alerts across endpoints, email, and cloud workloads

* Investigate security incidents end-to-end - from initial alert through containment, remediation, and lessons learned

* Tune detection rules and policies to reduce noise while ensuring meaningful threats don't slip through

* Collaborate with the broader security team on incident response exercises and tabletop scenarios

Automation & Continuous Improvement

* Build and maintain automation workflows to reduce repetitive manual work - think automated alert enrichment, provisioning/deprovisioning, reporting, and access reviews

* Use scripting (Power Shell, Python, or similar) to develop tools that improve the team's speed and effectiveness

* Identify areas where manual processes can be streamlined and take ownership of making them better

* Contribute to the development of runbooks, playbooks, and standard operating procedures

Key Skills

* You can explain a security incident clearly to a non-technical audience without losing the important details

* You're comfortable owning problems - you follow through from identification to resolution

* You think about security at scale and look for ways to build processes that don't require constant human intervention

* You're collaborative - you work well across IT, engineering, and business teams

* You stay curious about how attackers think and keep up with the evolving threat landscape

Qualifications

* 3-5 years in an IT security, security operations, or systems administration role

* Hands-on experience with Microsoft Entra  (formerly Azure AD) - including Conditional Access, MFA, and identity governance

* Working knowledge of Cyber Ark or a comparable privileged access management (PAM) solution

* Familiarity with Microsoft XDR or Defender products (Defender for Endpoint, Defender for Identity, Defender for Office 365)

* Demonstrated ability to write scripts or automation - Power Shell, Python, KQL, or similar

* Preferred

Experience with Microsoft Sentinel or similar SIEM/SOAR platforms

* Preferred Familiarity with cloud security concepts in Microsoft Azure or M365 environments

* Preferred Exposure to security frameworks such as NIST, CIS Controls, or MITRE ATT&CK

* Preferred Relevant certifications (SC-200, AZ-500, Cyber Ark Defender, CompTIA Security+)

* Preferred Experience supporting a security awareness or phishing simulation program

Salary Range: $123,040 - $153,800

Salary pay ranges are determined by role and level. Within the range, the successful candidate's starting base pay will be determined based on factors including job-related skills, experience, certifications, qualifications, relevant education or training, and local market conditions.

At WK Kellogg Co, our success depends on our most vital asset - our people. That's why we're committed to providing you with benefits and programs that support your Total Health and your journey to be and feel your best - physically, financially, emotionally, and socially.

Although subject to change, the below are the benefits currently offered in association with this position:

* Incentive Plan bonus eligibility

* Health, dental and vision insurance

* Savings and Investment Plan with…