IT Security Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Montgomery, AL, US

2 days ago Requisition

IT Security engineer

• Security Governance & Compliance
• Develop, implement, and maintain enterprise-wide security policies, standards, procedures, and security governance frameworks covering IT, OT, and Physical Security
• Ensure compliance with corporate security requirements, cybersecurity regulations, and industry standards
• Coordinate internal and external security audits and maintain supporting documentation
• Perform security risk assessments and recommend mitigation strategies
• Security Operations
• Administer and maintain enterprise security solutions including Endpoint Protection (EPP/EDR), Data Loss Prevention (DLP), Email Security, Web Security, CASB, Device Control, and Microsoft 365 Security
• Monitor security events, investigate alerts, and coordinate incident response activities
• Perform vulnerability assessments and coordinate remediation efforts across enterprise systems
• Manage security patching and hardening activities to reduce cyber risks
• IT / OT Security
• Manage cybersecurity controls for both enterprise IT infrastructure and Operational Technology (OT) environments
• Develop security standards and best practices for Industrial Control Systems (ICS) and manufacturing environments
• Collaborate with infrastructure and operations teams to strengthen system security while maintaining operational availability
• Support network segmentation and secure communication between IT and OT environments
• Identity & Access Security
• Implement and manage Identity and Access Management (IAM) policies
• Review user access rights and ensure compliance with the principle of least privilege
• Support Microsoft Entra  configuration and access governance
• Review and improve security controls for in-house developed applications
• Collaborate with software developers to implement Secure Development Lifecycle (Secure SDLC) practices
• Support security configuration and monitoring for Microsoft 365 and cloud-based services
• Identify security risks during application development and recommend appropriate mitigation controls
• Security Awareness & Incident Response
• Develop and deliver cybersecurity awareness training programs
• Lead security incident investigations and coordinate containment, recovery, and root cause analysis
• Maintain incident response procedures and disaster recovery security requirements
• Monitor emerging cyber threats and recommend proactive security improvements
• Documentation & Reporting
• Maintain security documentation, technical standards, and operational procedures
• Prepare security metrics, dashboards, and executive reports
• Recommend continuous improvements to enhance the organization's overall cybersecurity posture
• Other duties as assigned
• Perform other duties as assigned

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent work experience
• Experience supporting enterprise cybersecurity technologies and security operations
• Working knowledge of Microsoft 365 Security, Microsoft Entra , Endpoint Security, and Identity & Access Management
• Understanding of cybersecurity principles including risk management, vulnerability management, and incident response
• Knowledge of IT and OT security concepts and cybersecurity best practices
• Ability to analyze security risks and recommend practical solutions
• Strong analytical, troubleshooting, and problem-solving skills
• Excellent written and verbal communication skills
• Ability to work independently and collaboratively in a cross-functional environment
• Proficient with Microsoft Office Suite (Outlook, Word, Excel, PowerPoint)
• Bilingual Korean-English is preferred

• Cybersecurity certifications such as CISSP, CISM, Security+, GSEC, CySA+, or equivalent
• Experience with Microsoft Defender, Sentinel One, Trellix, Proofpoint, Skyhigh Security, or similar enterprise security platforms
• Experience supporting manufacturing or industrial environments
• Knowledge of Operational Technology (OT) or Industrial Control System (ICS) cybersecurity
• Experience with security compliance frameworks such as ISO 27001, NIST Cybersecurity Framework, SOC 2, or IEC 62443
• Familiarity with Secure Software Development Lifecycle (Secure SDLC) and application security practices
• Experience with cloud security technologies and Microsoft 365 security…