Security Engineer

The Security Engineer is responsible for implementing, maintaining and improving security systems, processes and controls in the US/EU WuXi security environment to protect the security and integrity of WuXi App Tec data. The Security Engineer works with security and Shared Service IT colleagues to configure, test, deploy and maintain security technology, investigate incidents and address vulnerabilities. The role contributes to continuous improvement of assigned systems under the direction of the Director Infrastructure and Security.

The Security Engineer supports the security of a diverse IT environment that includes desktop services, on-site servers and applications, cloud hosted solutions and mobile solutions.

This is a hybrid job, must be located in Saint Paul MN (one day a week on site)

• Implement, configure, maintain and troubleshoot security technologies across the company’s IT environments, including SIEM, EDR, firewalls, IDS/IPS, data loss prevention and mobile device management tools.
• Monitor and triage security alerts, correlate logs across systems and use threat intelligence to identify suspicious activity. Prioritize findings by risk and elevate according to established procedures.
• Investigate cybersecurity incidents, including phishing, malware and unauthorized access. Determine the scope and impact, preserve evidence, coordinate approved containment and recovery actions, and document cases through closure.
• Develop, test and tune security detection rules and alerting use cases to improve threat visibility and reduce false positives.
• Perform vulnerability assessments, validate and prioritize findings, coordinate remediation with IT teams, and verify that security fixes are effective.
• Implement and maintain secure configuration baselines for endpoints, servers, network devices and cloud resources. Identify configuration drift and coordinate corrective actions through established change procedures.
• Support identity and access management controls, including multi-factor authentication, single sign-on, privileged access and periodic access reviews, in collaboration with system and application owners.
• Assess and strengthen the protection of sensitive company information by applying encryption, data masking and appropriate data handling controls in accordance with established security policies and standards.
• Develop and maintain scripts using Power Shell, Python or similar tools to automate repetitive security tasks, enrich investigations and improve reporting and remediation workflows.
• Participate in security reviews of proposed infrastructure, cloud configurations, new systems and significant technology changes before deployment. Identify risks, recommend appropriate controls and
• Support security audits and compliance activities by gathering technical evidence, validating assigned controls against applicable policies and standards, and tracking remediation of audit findings.
• Maintain accurate security documentation, including system configurations, operating procedures, incident response runbooks and change records. Prepare operational metrics and reports that identify trends, control gaps and improvement opportunities.
• Collaborate with security team members and Shared Service IT colleagues to deliver assigned security projects, share technical knowledge and resolve operational issues. Meet agreed deadlines and quality standards, communicate progress and ...
• Monitor emerging threats and security developments, assess their relevance to the company’s environment and recommend improvements to security tools, controls and procedures.

• 4 years of relevant experience in cyber security roles
• Bachelor’s or equivalent work experience as a…