Cybersecurity Administrator

Position Summary

Trew LLC is seeking a hands‑on Cybersecurity Administrator to establish and maintain the company's information security program. This is a foundational role with broad scope: the successful candidate will be building security infrastructure from the ground up in the organization operating Oracle EBS R12.2, Microsoft 365, Azure, and industrial automation environments. This role is a dedicated cybersecurity position being created and requires both operational proficiency and the ability to exercise independent judgment in a newly independent environment where security architecture, policies, and tooling must be established with urgency.

• Configure, manage, and monitor endpoint detection and response (EDR) tools across a mixed server environment (552 servers across on‑premise and data center environments) and 2,555 end‑user devices
• Administer email security platforms including anti‑phishing, anti‑spam, and DLP controls within Microsoft 365
• Manage MFA and identity access controls; support integration with Azure Active Directory and Oracle identity management
• Monitor SIEM alerts (Splunk) and triage security events; elevate and coordinate incident response as needed
• Maintain and tune firewall rulesets; support network security configuration across multi‑site WAN (Cisco MPLS, Riverbed)
• Conduct vulnerability scans, prioritize findings, and coordinate remediation with infrastructure and application teams

• Develop, document, and enforce cybersecurity policies, standards, and procedures appropriate for a standalone manufacturing organization
• Support internal compliance requirements and assist with any applicable regulatory or customer security assessments
• Maintain vulnerability management program including tracking, reporting, and remediation metrics
• Assist with vendor risk assessments and third‑party security reviews

• Provide basic cybersecurity support for operational technology (OT) environments including conveyor automation and engineering lab systems
• Coordinate with engineering and operations teams to apply appropriate security controls without disrupting production systems
• Support evaluation and potential deployment of OT‑specific security tooling (e.g., Forge Cyber Insights)

• Contribute to the buildout of a security program from inception, including tooling selection, policy development, and process establishment
• Support security awareness training and phishing simulation programs for end users
• Maintain security asset inventory and participate in disaster recovery / business continuity planning for IT systems

• 3‑5 years of experience in an IT security or systems administration role with direct security responsibilities
• Hands‑on experience with EDR platforms (Crowd Strike, Sentinel One, or equivalent), SIEM tools (Splunk preferred), and vulnerability management tools (Nessus, Qualys, or equivalent)
• Working knowledge of Microsoft 365 security administration (Defender, Exchange Online Protection, Conditional Access)
• Experience with firewall administration (Cisco, Palo Alto, or equivalent)
• Familiarity with Active Directory and Azure AD identity and access management
• Ability to work independently in an ambiguous environment and prioritize competing demands
• Strong written and verbal communication skills; ability to translate technical risk into business terms

• Security certification:
  CompTIA Security+, CISSP, CISM, or equivalent
• Experience in a manufacturing, industrial automation, or OT/ICS environment
• Familiarity with Oracle EBS environments and associated security considerations
• Experience supporting security in a post‑M&A or carve‑out environment
• Knowledge of NIST CSF, CIS Controls, or ISO 27001 frameworks
• Experience with cloud security (Azure preferred)

• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related field — or equivalent professional experience

This is primarily a desk‑based role requiring extended periods of sitting and computer use. The position may require occasional travel to manufacturing facilities,…