Senior Security Engineer

## Senior Security Engineer Apply:
Wyoming, Michigan:
Atlanta, Georgia:
Full time:
Posted Today:
R-57563

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There's a seat at our table for you...
*
* Position Summary:

** The
** Senior Cybersecurity Engineer
** is a core technical leader within our Security Operations (Sec Ops) team, responsible for designing, automating, and maintaining the organization’s enterprise security architecture. Operating in a high-impact, low-friction environment, this role directly drives threat hunting, detection engineering, security validation, and tool automation across enterprise, cloud, and hybrid environments. This role balances deep platform infrastructure operations with modern automation techniques (CI/CD, Infrastructure-as-Code, AI workflows) to maximize defensive coverage and empower SOC analyst operations.

*
* What you will do:

*
* ** Security Strategy and Leadership:
*** Provide strategic leadership in the development and execution of cybersecurity strategies, policies, and frameworks.
* Collaborate with senior stakeholders to align cybersecurity initiatives with organizational goals and objectives.
* Stay updated with emerging cybersecurity trends, threats, and technologies to provide expert guidance and recommendations.
** Threat Hunting & Threat Intelligence:
*** Lead the Sec Ops threat hunting program across multi-platform operating systems, enterprise cloud environments, virtualized infrastructure, and network environments.

Correlate open-source and proprietary threat intelligence (TTPs) into proactive, baseline, and reactive threat hunts.

Maintain and expand automated hunt dashboards and threat hunting automation frameworks.
** Security Architecture and Engineering:
*** Aid in designing, implementing, and maintaining secure network architectures and infrastructure.
* Maintain log ingestion pipelines, custom parsers, data normalization models, feed integrations, and overall platform health of the SIEM/SOAR environment.
* Collaborate with cross-functional teams to evaluate and select security technologies and solutions.
** Incident & Operational Response:
*** Act as the Tier 2 technical escalation point and mentor for Security Analysts.

Participate in critical Incident Response efforts, root-cause investigations, and the Sec Ops On-Call rotation.

Conduct detailed investigations of security incidents, perform root cause analysis, and implement remediation measures.
** Detection Engineering & Security Validation:
*** Design, build, and tune custom detections in vendor-neutral rule languages and native SIEM/SOAR/EDR logic to eliminate false positives while maintaining robust detection posture.
* Execute automated and manual threat emulation/attack chains using open-source testing frameworks to continuously validate log ingestion, rule efficacy, and security controls.

Support external Red Team engagements and remediate identified visibility and control gaps.

Security Automation & Infrastructure-as-Code (IaC):
* Build and manage Infrastructure-as-Code (IaC) configurations via version-controlled CI/CD pipelines for security work spaces and validation environments.
* Write, maintain, and integrate custom automation scripts (e.g., Python, Power Shell) and SOAR playbooks to streamline analyst triage and system workflows.

Assist in developing, tuning, and integrating modern AI agent platforms and operational workflows into core Sec Ops pipelines.  
** When you will work:*
* * Monday to Friday, 8am to 5pm
* Hybrid schedule, 4 days in office in Wyoming, MI or Atlanta, GA with 1 day remote  
** What…