Senior Security Engineer

Senior Security Engineer at Northern Tool + Equipment

At Northern Tool + Equipment we get up every day to serve the tradespeople who keep our country running strong and the weekend warriors who want to work like them. Our mission is to make sure they have the right tools for the job and an easy, hassle‑free experience at our store so they can get in, get out and get on with the job r top priority as a Senior Security Engineer is to ensure the stability, integrity, and efficient operation of the company’s security systems that protect and support core organizational functions.

The Senior Security Engineer will apply proven communication, analytical, and problem‑solving skills to help identify, communicate, and resolve issues in order to maximize the benefit of IT security investments. Your positive, professional, roll‑up‑your‑sleeves‑to‑help attitude contributes to our winning culture and makes sure we leave a lasting impression.

• Promotes a culture of security across the organization.
• Develops and maintains daily system monitoring to verify the integrity and availability of all security systems and security processes.
• Collaborate with infrastructure and product teams to embed security into systems and processes.
• Provide guidance and training to employees on security best practices.
• Research emerging technologies and trends to ensure the company remains ahead of evolving threats.
• Assess current security infrastructure and recommend upgrades to improve performance and resilience.
• Develop strategic roadmaps for security technology adoption aligned with business and IT goals.
• Lead planning and execution of security projects, including upgrades and new solution deployments.
• Define project scope, establish timelines, set milestones, and track progress to ensure timely delivery.
• Configure security software to operate within the broader IT environment.
• Performs ongoing security software upgrades and investigates new product features of deployed security systems. Configures or adds new features and services as necessary to maintain security levels.
• Conducts forensic investigations into cyber attacks to help identify vulnerabilities and prevent future incidents.
• Designs and implements information security protocols to protect electronic data and systems from unauthorized access.
• Conducts security risk assessments and audits of networks, applications, and databases to identify vulnerabilities.
• Develop and maintain incident response playbooks and procedures.
• Prioritize and remediate findings in collaboration with infrastructure and product teams.
• Perform periodic performance and licensing reporting to support and forecast capacity and utilization planning.
• Supports and works with internal business partners to evaluate needs to recommend and implement solutions.
• Works with Tier 1 support personnel to resolve issues. Mentors Tier 1.
• Works with product teams, Infrastructure and IT Operations teams to establish and maintain an appropriate level of application and server security.
• Ensure compliance with PCI‑DSS, GDPR, and other relevant regulations.
• Identifies and maintains documentation for all security system software, system configuration, application configuration and licensing information.

• Bachelor’s degree in computer science or related field.
• 5+ years of experience in cybersecurity, with at least 2 years in a senior or lead role.
• IT Infrastructure experience (networking, security or systems responsibilities) with 2 years as a Security Engineer.
• Certifications in security and/or cloud platforms a plus.
• Ability to work independently and in a team‑oriented, collaborative environment.
• Ability to communicate effectively, both orally and in writing, with a wide variety of Company personnel and others.
• Industry security certifications a plus.
• Experience with Microsoft E5 security products a plus.
• Demonstrated ability to keep up‑to‑date on new security software/hardware technology and other advancements relating to industry trends.
• Proven experience developing, operating, and maintaining security systems.
• Knowledge of operating system and database security.
• Knowledge of security systems…