IT Security Engineer

We offer excellent benefits including health, dental, vision, life, STD, LTD, EAP, FSA, 401K, vacation, and paid holidays.
Global Packaging Group is an Equal Opportunity Employer.
Current job opportunities are posted here as they become available.

Reports To: IT Manager
FLSA Status: Exempt
Department: IT/IS
Division: 100

Pay Range to Start : $125K - $ 150 K ( Based on Experience )

The IT Security Engineer is responsible for administering and strengthening the organization’s cybersecurity program across infrastructure security, compliance, and user awareness. This role leads security patching and vulnerability remediation for servers and network-connected hardware; manages internal audits, compliance documentation, and the System Security Plan (SSP); supports risk assessments and disaster recovery testing; and drives security training and awareness initiatives. The position partners closely with the Senior Network Engineer, who retains ownership of server architecture, configuration, and infrastructure standards as well as technology procurement.

• Own security patching and vulnerability remediation for all servers, network-connected hardware, and infrastructure systems
• Plan, schedule, test, and deploy security updates in coordination with infrastructure owners and maintenance windows
• Validate patch compliance, document exceptions, and track remediation status to closure
• Perform vulnerability scanning, risk prioritization, and remediation follow-up across server and hardware platforms
• Coordinate with the Senior Network Engineer, who retains ownership of server architecture, configuration, and overall infrastructure standards

• Monitor security alerts, logs, and anomalies across systems, endpoints, and supported security platforms
• Investigate security events and coordinate remediation with internal teams and third‑party providers
• Support threat detection, incident response, and control validation using available monitoring and security tools
• Administer endpoint protection, antivirus, and related detection technologies

• Serve as a primary responder or coordinator during cybersecurity incidents
• Perform incident triage, root cause analysis, containment coordination, and recovery support
• Coordinate with internal stakeholders and external vendors during active incident response
• Document incidents, lessons learned, and corrective actions to improve future response readiness

• Review and validate identity‑related security settings, access risks, and MFA compliance
• Support periodic access reviews and identify remediation needs for excessive or outdated access
• Partner with system and infrastructure administrators to enforce least‑privilege and role‑based access practices
• Support audit readiness for access control compliance

• Support firewall, VPN, remote access, and related security operations without owning core network configuration
• Review security posture and recommend hardening improvements for network and infrastructure platforms
• Monitor for suspicious traffic or activity and escalation concerns as appropriate
• Coordinate implementation and verification of approved hardening standards across servers and hardware platforms

• Plan and conduct internal security audits, control reviews, and remediation tracking across applicable frameworks and internal requirements
• Coordinate risk assessments, evaluate control effectiveness, and track corrective actions to closure
• Manage the System Security Plan (SSP), including updates to scope, system boundaries, control…