IT Security Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Montgomery, AL, US

IT Security engineer

Job Description

Job Title:IT Security Engineer

Company Overview

HD Hyundai Power Transformers USA, Inc. is a leading manufacturer of power transformers based in Montgomery, Alabama. Established in 2011 as a subsidiary of HD Hyundai Electric, we specialize in producing high-voltage power transformers for utility and industrial customers across North America. With a commitment to innovation, safety, and quality, we continue to grow as a trusted partner in the energy sector.

Our mission extends beyond manufacturing—we aim to empower communities and support a sustainable future.

This position is responsible for designing, implementing, and managing enterprise-wide cybersecurity programs across Information Technology (IT), Operational Technology (OT), and Physical Security environments. The role focuses on strengthening the organization's security posture through governance, security operations, risk management, compliance, and secure system implementation while ensuring business continuity and regulatory compliance

• Security Governance & Compliance
• Develop, implement, and maintain enterprise-wide security policies, standards, procedures, and security governance frameworks covering IT, OT, and Physical Security
• Ensure compliance with corporate security requirements, cybersecurity regulations, and industry standards
• Coordinate internal and external security audits and maintain supporting documentation
• Perform security risk assessments and recommend mitigation strategies
• Security Operations
• Administer and maintain enterprise security solutions including Endpoint Protection (EPP/EDR), Data Loss Prevention (DLP), Email Security, Web Security, CASB, Device Control, and Microsoft 365 Security
• Monitor security events, investigate alerts, and coordinate incident response activities
• Perform vulnerability assessments and coordinate remediation efforts across enterprise systems
• Manage security patching and hardening activities to reduce cyber risks
• IT / OT Security
• Manage cybersecurity controls for both enterprise IT infrastructure and Operational Technology (OT) environments
• Develop security standards and best practices for Industrial Control Systems (ICS) and manufacturing environments
• Collaborate with infrastructure and operations teams to strengthen system security while maintaining operational availability
• Support network segmentation and secure communication between IT and OT environments
• Identity & Access Security
• Implement and manage Identity and Access Management (IAM) policies
• Review user access rights and ensure compliance with the principle of least privilege
• Support Microsoft Entra  configuration and access governance
• Review and improve security controls for in-house developed applications
• Collaborate with software developers to implement Secure Development Lifecycle (Secure SDLC) practices
• Support security configuration and monitoring for Microsoft 365 and cloud-based services
• Identify security risks during application development and recommend appropriate mitigation controls
• Security Awareness & Incident Response
• Develop and deliver cybersecurity awareness training programs
• Lead security incident investigations and coordinate containment, recovery, and root cause analysis
• Maintain incident response procedures and disaster recovery security requirements
• Monitor emerging cyber threats and recommend proactive security improvements
• Documentation & Reporting
• Maintain security documentation, technical standards, and operational procedures
• Prepare security metrics, dashboards, and executive reports
• Recomme…