Cybersecurity Platform Engineer

Description

The company is hiring a cybersecurity platform engineer for its global IT group. You will lead the build, setup, automation and ongoing improvement of enterprise security platforms, mainly Microsoft Defender, Microsoft Purview, cloud security and identity and access management.

You will be the technical owner for key security tools and make sure they are designed, integrated, governed, monitored and tuned to lower risk and support business goals. The role calls for hands-on engineering depth, solid security fundamentals, and the ability to turn risk, compliance and operational needs into platforms that scale. You will work with infrastructure, networking, application, data, OT and business teams across cloud, endpoint, identity, collaboration and data protection. The company makes meat snacks through a global portfolio of brands and was founded in Wisconsin about four decades ago.

Responsibilities

• Lead the engineering, administration and ongoing improvement of Microsoft Defender tools, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR and related integrations.
• Build out and mature Microsoft Purview for data protection, governance, data loss prevention, insider risk, eDiscovery support, retention, sensitivity labels and enforcement of compliance controls.
• Build cloud security controls across Microsoft Azure and Microsoft 365, covering secure baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement and remediation tracking.
• Lead identity and access management work across Entra ID and Active Directory, including Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access and secure sign-in methods.
• Write scripts, automation and integrations that make security platforms more reliable, reduce manual work and enforce controls consistently across global environments.
• Work with security operations, MDR, SIEM, infrastructure, network, application, data and OT teams to connect platforms to detection, response, vulnerability management, incident response and daily workflows.
• Create and maintain security standards, configuration baselines, procedures, runbooks, diagrams and audit-ready evidence for regulatory and cybersecurity framework requirements.
• Define and report platform health, control effectiveness, adoption, remediation progress and secure configuration status for technical teams and leaders.
• Assess new security capabilities, Microsoft roadmap changes, cloud security trends and industry practices, and recommend practical improvements to the security posture.
• Perform other duties as assigned.

Requirements

• Bachelor's degree in cybersecurity, information technology, computer science, information systems or a related field, or equivalent professional experience.
• 4+ years of hands-on experience engineering, running or improving security platforms in Microsoft security, cloud, identity, endpoint, data protection or security operations.
• Solid foundation in platform engineering, including endpoint and cloud security, IAM, data protection, compliance controls, automation and incident response support.
• Skilled with Microsoft security and identity technologies, Windows, Linux, PowerShell, scripting, API integrations and automating security operations.
• Strong hands-on experience with Defender, Purview, Entra ID, Intune, Active Directory, Sentinel and Microsoft 365 security and compliance features.
• Able to configure platforms, analyze logs, tune alerts, build dashboards, validate controls, develop secure baselines and track remediation.
• Proven ability to secure both IT and OT networks, including incident response, alert triage and vulnerability management.
• Proficient in managing identity and access controls, including Active Directory administration and privileged access management.
• Able to carry out cybersecurity strategy and enforce technical policies across enterprise environments.
• Experienced with ISO 27001, NIST CSF and GDPR.
• Able to manage vendor relationships and coordinate internal and external stakeholders on security incidents and compliance matters.
• Solid grasp of cybersecurity principles, risk management, encryption, authentication and access control.
• Deep knowledge of network and infrastructure security, including virtualization, wireless technologies and email systems.
• Familiar with SIEM platforms, automated penetration testing tools and cloud risk assessment methods.
• Knowledgeable in security design, technical governance and third-party audit practices.
• Able to explain complex technical issues clearly to both technical and non-technical audiences.
• Discreet when handling sensitive and confidential information.
• Adaptable, well organized and able to solve problems independently.
• Stays composed under pressure and can provide after-hours support when needed.
• Willing to travel up to 10% for training and business activities.
• Preferred: experience as the primary engineer or platform owner for tools such as Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Defender for Cloud, Tenable Nessus, BeyondTrust, Palo Alto or similar enterprise security technologies.
• Preferred: experience building scalable security platform roadmaps, raising control maturity, reducing manual effort and turning security requirements into technical implementation plans.
• Preferred: cybersecurity certifications such as CISSP, CISM, CompTIA Security+, CompTIA CySA+ or Microsoft Security, or equivalent practical experience.
• Preferred: experience securing OT or industrial networks in manufacturing or consumer packaged goods environments.
• Preferred: familiarity with Power BI, Fabric or similar tools for security data analysis and reporting.

Conditions

Work takes place in a plant or office setting with varying temperatures and noise levels, and some exposure to moving manufacturing equipment and wet or slippery floors. Most of the work is done in a climate-controlled office.

Travel may be required.

Physical demands: you will sit and use your hands to finger, handle or feel for most of the day, and talk and hear regularly. You will stand, walk and reach occasionally, and lift or move up to 25 pounds occasionally. Close vision is required. Reasonable accommodations are available for people with disabilities.

The company provides equal employment opportunity to all people regardless of age, color, national origin, citizenship status, disability, race, religion, creed, sex, sexual orientation, gender identity or expression, genetic information, marital status, public assistance status, veteran status or any other legally protected characteristic, and keeps all applicant information confidential.

Benefits

• Starting salary of $115,000.00 to $130,000.00. The final figure depends on external market data, internal equity, location, and the candidate's skills and experience.
• Base pay is one part of total rewards, which may also include an annual incentive and program-specific awards.
• Medical, dental and vision benefits.
• Life and disability insurance.
• 401(k) participation.
• Paid holidays and paid time off.