Senior Security Engineer

The Senior Security Engineer is the primary technical cybersecurity expert for GORILLA GLUE COMPANY, helping design, implement, operate, and validate security controls across identity, endpoint, cloud, data protection, and security operations. This onsite role in Sharonville, OH focuses on reducing risk and continuously improving the company’s cybersecurity posture by partnering with internal teams and managed security providers.

In this position, you will support Microsoft security capabilities end to end, from identity and access to data protection and detection workflows, while also contributing to incident response, architecture reviews, and industrial cybersecurity for manufacturing and OT environments.

• Administer and continuously improve Microsoft Entra security controls, including Conditional Access
  , multifactor authentication
  , Privileged Identity Management
  , access reviews, and privileged-access hygiene.
• Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads.
• Design and implement Microsoft Purview controls for data classification, data loss prevention, information protection, and secure AI adoption.
• Maintain strong working knowledge of SIEM integrations
  , security telemetry,
  KQL
  , and Microsoft Sentinel to support the managed detection environment.
• Design and implement security controls across Microsoft 365
  , Azure
  , hybrid identity, endpoints, servers, cloud services, and business technology environments.
• Conduct security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services.
• Develop security automation using Power Shell
  , KQL
  , APIs
  , and orchestration capabilities to improve consistency, visibility, and response speed.
• Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls.
• Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact.
• Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends.
• Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets.
• Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned.
• Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions.
• Perform or support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events.
• Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners.
• Partner with Plant IT teams to strengthen cyber security posture of manufacturing and OT environments
  .
• Assist in the design, implementation, and ongoing management of network segmentation and connected manufacturing technology.
• Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies.
• Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards.
• Support Information Security policies, standards, and compliance requirements.
• Maintain security documentation, diagrams, and procedures.
• Assist with vendor security reviews and risk assessments.
• Support audits and cybersecurity assessments.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a…