Security Engineer III

Work Location Type:Onsite

Req Number 336415

About Grainger

W.W. Grainger, Inc. is a leading broad line distributor with operations primarily in North America and Japan. At Grainger, We Keep the World Working® by serving more than 4.6 million customers worldwide with maintenance, repair and operating (MRO) products and value-added solutions delivered through innovative technology and deep customer expertise. Known for its commitment to service and purpose-driven culture, the Company reported 2025 revenue of $17.9 billion. For more information, visitwww.grainger.com.

Compensation

The anticipated base pay compensation range for this position is $121,200.00- $202,100.00. This role is eligible for an incentive target of up to 10%, based on the achievement of individual and company performance objectives in accordance with the current terms of the incentive program which are subject to change.

Rewards and Benefits

With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:

• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.

For additional information and details regarding Grainger’s benefits, please click on the link below:

https://experience100.ehr.com/grainger/Home/Tools-Resources/Key-Resources/New-Hire

Grainger Benefits

The pay range provided above is not a guarantee of compensation. The range reflects the potential base pay for this role at the time of this posting based on the job grade for this position. Individual base pay compensation will depend, in part, on factors such as geographic work location and relevant experience and skills.

The anticipated compensation range described above is subject to change and the compensation ultimately paid may be higher or lower than the range described above.

Grainger reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion at any time, consistent with applicable law.

Position Details

Help build the next stage of security at Grainger Frictionless, an AI-powered tracking solution for industrial supply, construction, and retail. Partner with IT, cloud and product teams and Grainger security colleagues to strengthen real-world defenses and move toward recognized compliance standards. This role is an opportunity to shape how security works across the business today and as we scale in the future.

The Security Engineer Senior evaluates and improves security controls across technology environments to protect information assets, systems, and business operations. The role applies in-depth cybersecurity knowledge to identify vulnerabilities, assess risks, recommend and implement appropriate safeguards, and support resolution of security issues in partnership with technical and business teams. The position contributes to security assessments, compliance readiness, and continuous improvement of established security practices to maintain secure and reliable technology operations.

This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g. OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position.

The position is located at our Aliso Viejo, CA office.

You Will

• Assess and evaluate cybersecurity risks across assigned technology systems, applications, networks, and infrastructure to identify vulnerabilities, security gaps, and potential threats to business operations and information assets.
• Implement and improve security controls by evaluating existing safeguards, recommending risk-based improvements, and partnering with technical teams to support secure system configurations and compliance with established enterprise security policies and standards.
• Support vulnerability management and remediation activities by analyzing security assessments, testing results, and identified vulnerabilities; prioritizing findings based on risk; and coordinating corrective actions with appropriate technical teams to reduce security exposure.
• Evaluate security requirements and technical solutions by collaborating with technology, infrastructure, application, and engineering teams to identify security considerations, assess proposed changes, and recommend practical controls that support secure and reliable operations.
• Lead assigned security assessment and compliance-readiness activities by evaluating applicable security requirements, identifying control gaps, coordinating remediation efforts, and maintaining documentation and evidence to support internal reviews, audits, and established security frameworks.
• Support security investigations and continuous improvement by analyzing security incidents and technical findings, recommending corrective actions, documenting results, and communicating security risks and best practices to technical and business stakeholders to strengthen security awareness and operational effectiveness.
• Evaluate security across Grainger Frictionless employee and field devices, office networks, firewalls, and related IT systems in partnership with central Grainger security teams and Grainger Frictionless technical teams to identify environment-specific risks and support appropriate safeguards.
• Assess Microsoft Azure cloud resources and configurations in collaboration with cloud engineering teams, identifying potential security exposures and recommending risk-based safeguards appropriate to Grainger Frictionless cloud environments.
• Partner with Grainger Frictionless development, cloud, and Grainger corporate security teams to coordinate vulnerability scanning and penetration testing of deployed custom software and related technology, review findings, and support remediation without owning application code.
• Coordinate Grainger Frictionless security-control and compliance-readiness activities involving applicable frameworks such as ISO 27001, SOC 2, CMMC, and PCI DSS by identifying environment-specific gaps, supporting remediation priorities, and gathering evidence for security assessments.

You Have

• 7+ years of cybersecurity or related IT/cloud security experience, including security improvements and compliance or audit-readiness under a recognized framework; customer-facing software, vulnerability scanning, or penetration testing experience preferred.
• Bachelor’s degree in a technology-related field or equivalent relevant experience; strong candidates without a degree will be considered. An advanced degree in technology or engineering is preferred.
• In-depth knowledge of cybersecurity principles, security controls, and risk assessment practices used to protect technology systems, applications, networks, devices, and information assets.
• Ability to evaluate security configurations, technical vulnerabilities, assessment findings, and control gaps to identify risks and recommend appropriate safeguards.
• Knowledge of vulnerability management, security testing, remediation practices, and security investigations used to identify, evaluate, and address technical security issues.
• Ability to interpret applicable security policies, standards, and recognized compliance frameworks and apply requirements to security controls, assessment documentation, and remediation activities.
• Ability to analyze varied security issues, evaluate technical and operational considerations, and exercise independent judgment when recommending practical security improvements within established policies and standards.
• Ability to communicate security risks, technical findings, and recommended controls to technical and nontechnical stakeholders and collaborate across technology and business teams to support resolution.
• Working knowledge of Microsoft Azure security controls, cloud configurations, and related security practices used to assess risks and recommend safeguards within Grainger Frictionless cloud environments.
• Knowledge of employee endpoints, field devices, office networks, firewalls, and connected technology environments used to identify and evaluate security risks affecting Grainger Frictionless operations.
• Ability to interpret vulnerability-scanning and penetration-testing findings involving deployed custom software and coordinate technical remediation with Grainger Frictionless development, cloud engineering, and Grainger corporate security teams.
• Ability to apply applicable ISO 27001, SOC 2, CMMC, PCI DSS, or similar framework requirements to Grainger Frictionless security controls, remediation activities, and assessment evidence while balancing technical and operational constraints.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, protected veteran status or any other protected characteristic under federal, state, or local law. We are proud to be an equal opportunity workplace.

We are committed to fostering an inclusive, accessible work environment that includes both providing reasonable accommodations to individuals with disabilities during the application and hiring process as well as throughout the course of one’s employment, should you need a reasonable accommodation during the application and selection process, including, but not limited to use of our website, any part of the application, interview or hiring process, please advise us so that we can provide appropriate assistance.

#LI-SV1