Security Operations Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Regular St. Clair Shores, MI, US

Fisher Dynamics is the automotive industry’s premier supplier of safety – critical seat structures and mechanisms. Steeped in a tradition of excellence, and rooted in automotive innovation, the Fisher story is filled with automotive manufacturing milestones. We bring design, engineering, and manufacturing vehicle seating systems to a new level with innovative thinking. We’re about cutting edge ideas. We have created an environment that encourages an uninterrupted flow of revolutionary concepts and unique ideas.

Fisher Dynamics is currently seeking a Security Operations Engineer to join our corporate IT department in Saint Clair Shores, MI. This posistion is responsible for executing security controls, compliance frameworks, and infrastructure hardening for Fisher Dynamics' custom ERP platform. They will translate security architecture into operational reality: configuring firewalls, implementing ISO 27001/TISAX controls, hardening switches, deploying GRC tooling, and ensuring compliance readiness.

They will be the hands‑on implementer who makes security work in production.

• Implement ISO 27001 and TISAX controls across the ERP platform
• Deploy and configure GRC tooling for control tracking, evidence collection, audit documentation
• Map security requirements to technical controls (access control, encryption, logging, monitoring)
• Maintain control inventory and track implementation status
• Support compliance audits with evidence gathering and remediation tracking

• Configure and deploy firewalls (Palo Alto, Check Point, Fortinet, etc.) for ERP protection
• Implement firewall rules aligned with zero‑trust architecture and network segmentation
• Implement network access controls, rate limiting, DDoS protection
• Troubleshoot and optimize firewall performance without compromising security

• Implement cloud security controls on AWS/GCP/Azure (security groups, NACLs, WAF)
• Configure cloud IAM, MFA, logging, monitoring aligned with compliance requirements
• Implement secrets management, key rotation, encryption controls in cloud environment
• Perform cloud security configuration reviews and remediation

• Deploy identity and access management systems (RBAC, ABAC)
• Configure multi‑factor authentication (MFA), conditional access policies
• Implement privileged access management (PAM) for administrator accounts
• Maintain user access reviews and certification workflows
• Configure segregation of duties controls in ERP system
• Configure centralized logging and SIEM systems for security event monitoring
• Implement alerts for suspicious activity, policy violations, and anomalies
• Maintain audit trails for compliance and forensics
• Produce security monitoring dashboards and reports

• Execute vulnerability scanning and assessment programs
• Coordinate patch management and security updates
• Remediate identified vulnerabilities with risk‑based prioritization
• Track remediation status and compliance with SLAs

• Document security configurations, controls, and procedures
• Prepare for ISO 27001/TISAX audits with documentation and evidence
• Write control testing procedures and validation scripts
• Update risk registers and compliance status reports

• Treat security implementation like managed service: reliable, repeatable, documented
• Build runbooks and standard operating procedures for control execution
• Monitor control effectiveness and…