{"id":2668250,"url":"https://alion.io/job/crb-security-operations-engineer-2","title":"Security Operations Engineer","company":{"id":8728,"name":"CRB","domain":"crbgroup.com","url":"https://alion.io/company/crb","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":34,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Louis, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":77000,"max_usd":149000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":425},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Confluence","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Power Automate","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-13T16:10:35Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-16T13:02:13Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"CRB's nearly 1,800 expert professionals drive innovative, life-changing and life-saving solutions for manufacturers in the life sciences and food and beverage industries. Our mission, vision and core values put client satisfaction and employee experience at the center of everything we do. See us at crbgroup.com.\n The Security Operations Engineer serves to strengthen and advance the security, privacy, and operational resilience of our enterprise technology environment. This role serves as a key contributor in protecting CRB's infrastructure, endpoints, identities, SaaS platforms, cloud services, and business application\nThe position combines expertise in cybersecurity, security engineering, IT operations, compliance, and offensive security to design, implement, and continuously improve controls that reduce organizational risk while supporting business productivity. This position partners closely with IT, Legal, Compliance, Privacy, and business stakeholders to translate security and regulatory requirements into practical technical solutions, sustainable operational processes, and measurable outcomes.\nThis position reports to the Director of Security Engineering.\nWork Mode: Hybrid schedule. In office three days per week.\nCan be located in: Kansas City, MO, St. Louis, MO, Denver, CO, or Dallas, TX,\nResponsibilities\nSecurity Engineering & Operations\nServe as CRB's primary technical liaison to Managed Security Services Providers (MSSPs), overseeing security operations activities, vulnerability assessments, remediation efforts, and third-party service delivery.\nMaintain and administer the enterprise security and privacy risk register, ensuring risks are identified, assessed, tracked, mitigated, and reported in accordance with established governance processes.\nDevelop, maintain, and enhance security policies, standards, procedures, control documentation, runbooks, user guidance, and incident response documentation in partnership with Security, Compliance, and Technology leadership\nLead audit readiness and compliance activities by coordinating evidence collection, validating control effectiveness, supporting assessments, and maintaining comprehensive audit documentation, including access records, change records, vulnerability findings, incident documentation, and remediation evidence\nImplement, administer, and continuously improve security controls across cloud environments, SaaS platforms, and enterprise systems.\nOwn identity and access management processes, including Azure Entra ID, single sign-on (SSO), multifactor authentication (MFA), privileged access management, provisioning, and deprovisioning activities.\nSupport endpoint security, patch management, device compliance, configuration management, and asset lifecycle operations.\nMaintain accurate inventories of technology assets, applications, user accounts, licenses, data flows, and system ownership.\nPartner with IT teams and business stakeholders to improve secure configuration management, vulnerability remediation, backup and recovery capabilities, and operational resilience.\nEvaluate new technologies, vendors, integrations, and data management practices to ensure alignment with security and privacy requirements.\nAutomate security and operational workflows using tools such as Python, PowerShell, Power Automate, Jira Automation, or comparable technologies.\nSupport security monitoring, incident investigation, containment, response, recovery, and continuous improvement activities.\nSecurity Testing & Risk Assessment\nConduct authorized vulnerability assessments and penetration testing activities across infrastructure, networks, cloud environments, identity platforms, and enterprise applications.\nPerform attack-path analysis and red-team exercises to identify security weaknesses, privilege escalation risks, and control gaps.\nAnalyze security events, threat intelligence, forensic evidence, and vulnerability findings to assess risk and business impact.\nDocument findings, establish risk ratings, identify root causes, and recommend practical remediation strategies.\nValidate remediation activities through testing, evidence review, and control verification.\nSupport tabletop exercises, incident response simulations, and security control testing programs.\nEnsure all testing activities are appropriately authorized, documented, and executed in accordance with organizational policies and business requirements.\nSecurity, Privacy & Compliance\nSupport compliance with applicable privacy and security regulations, including GDPR, Germany's Federal Data Protection Act (BDSG), and Switzerland's Federal Act on Data Protection (FADP).\nPromote Secure by Design and Privacy by Design principles throughout technology initiatives and operational processes.\nSupport data governance activities including records of processing, data flow mapping, retention controls, access reviews, and protection of sensitive information.\nPartner with Legal, Privacy, Compliance, and business leaders on regulatory inquiries, vendor reviews, risk assessments, and remediation activities.\nTranslate regulatory, audit, contractual, and customer requirements into actionable technical and operational controls.\nAssess third-party technology providers and document associated security and privacy risks.\nTrack security and compliance findings through closure and provide meaningful reporting to technical and business stakeholders.\nSupport CRB's security, privacy, and governance frameworks, including ISO and NIST-aligned initiatives.\n Required\nBachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, or a related field; equivalent experience.\nMinimum of 3 years of experience in cybersecurity, IT operations, infrastructure management, endpoint administration, enterprise applications, or a related discipline.\nProven experience supporting enterprise endpoints, SaaS platforms, identity systems, and geographically distributed workforces.\nExperience with vulnerability management, penetration testing, incident response, network security analysis, and digital forensics.\nExperience administering Microsoft 365, Azure Entra ID, Intune, or comparable identity and endpoint management solutions.\nWorking knowledge of SSO, SAML, MFA, privileged access management, access provisioning, and least-privilege principles.\nDemonstrated understanding of firewalls, intrusion detection and prevention systems, network security monitoring, operating system security, and common attack methodologies.\nExperience automating technical processes using Python, PowerShell, or similar scripting languages.\nExperience supporting audits, compliance reviews, technical documentation, evidence collection, and control testing.\nWorking knowledge of GDPR and familiarity with German and Swiss privacy regulations.\nProven strong analytical, problem-solving, organizational, and communication skills.\nDemonstrated ability to manage multiple priorities, work independently, and drive cross-functional remediation efforts.\nPreferred\nProfessional security certifications such as CompTIA Security+, Cloud+, OSCP, PNPT, GPEN, CEH, or comparable credentials.\nExperience participating in penetration testing, red-team engagements, security labs, or adversary simulations.\nExperience supporting business operations in Germany, Switzerland, Austria, or other European jurisdictions.\nExperience with Microsoft Defender, SIEM platforms, EDR solutions, vulnerability scanning tools, and cloud security technologies.\nExperience conducting third-party risk assessments and vendor security reviews.\nFamiliarity with ISO 27001, ISO 27701, ISO 42001, NIST Cybersecurity Framework, or similar governance frameworks.\nExperience with Jira Service Management, Jira Assets, Confluence, SharePoint, Power BI, or related enterprise platforms\n All your information will be kept confidential according to EEO guidelines.\nCRB is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity Employer and it is our policy to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Employment is contingent on background screening.\nCRB does not accept unsolicited resumes from search firms or agencies. Any resume submitted to any employee of CRB without a prior written search agreement will be considered unsolicited and the property of CRB. Please, no phone calls or emails.\nCRB offers a complete and competitive benefit package designed to meet individual and family needs.\nIf you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.","description_format":"text","description_chars":8886,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false},{"language":"German","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Chemical Engineering","Information Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-16T03:29:19Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.662,"p_room":1,"age_days":2,"expected_fill_days":20,"reasons":["conf:2","stale_co","wave","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/crb-security-operations-engineer-2","json_url":"https://alion.io/job/crb-security-operations-engineer-2.json","meta":{"generated_at":"2026-10-16T13:58:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13402,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8728},"rest":"https://alion.io/mcp/rest/get_company?id=8728"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrb-security-operations-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrb-security-operations-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrb-security-operations-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crb-security-operations-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrb-security-operations-engineer-2"}]}