Senior Security Engineer

Summary Description

The Senior Security Engineer serves as The Gorilla Glue Company's primary technical cybersecurity expert. This hands-on role designs, implements, operates, and validates security controls across identity, endpoint, cloud, data protection, and security operations platforms. The position partners closely with Infrastructure, Service Desk, Data and AI Governance, and managed security providers to reduce risk, strengthen resilience, and continuously improve the company's cybersecurity posture.

What's in it for you?

Thanks to our commitment to creating a supportive and engaged workplace culture, Gorilla Glue has been recognized as a top place to work for 16 years in a row. We offer competitive compensation packages, comprehensive healthcare benefits, and other perks and incentives to ensure our employees feel valued and supported.

Joining the Gorilla Glue family means being part of a team passionate about building strong brands and promoting a culture of excellence. As an employee, you'll be able to help create high-quality products and build brands that people love. Join us in an inspiring workplace where you can belong, grow, and make a difference!

What will your day look like?

Microsoft Security Platform Ownership

• Administer and continuously improve Microsoft Entra ID security controls, including Conditional Access, multifactor authentication, Privileged Identity Management, access reviews, and privileged-access hygiene.
• Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads.
• Design and implement Microsoft Purview controls supporting data classification, data loss prevention, information protection, and secure AI adoption.
• Maintain strong working knowledge of SIEM integrations, security telemetry, KQL, and Microsoft Sentinel capabilities to support the managed detection environment.

Security Engineering & Architecture

• Design and implement security controls across Microsoft 365, Azure, hybrid identity, endpoints, servers, cloud services, and business technology environments.
• Perform security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services.
• Develop security automation using PowerShell, KQL, APIs, and orchestration capabilities to improve consistency, visibility, and response speed.
• Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls.

Vulnerability & Exposure Management

• Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact.
• Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends.
• Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets.

Security Operations & Incident Response

• Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned.
• Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions.
• Perform or support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events.
• Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners.

OT/Manufacturing Security

• Partner with Plant IT teams to strengthen cyber security posture of manufacturing and OT environments.
• Assist in the design, implementation, and ongoing management of network segmentation and connected manufacturing technology.
• Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies.
• Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards.

Governance, Risk & Compliance

• Support Information Security polices, standards, and compliance, requirements.
• Maintain security documentation, diagrams, and procedures.
• Assist with vendor security reviews and risk assessments
• Support audits and cybersecurity assessments

What you bring to the table:

Education & Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
• Five or more years of progressive experience in security engineering, cybersecurity operations, cloud security, identity security, or related technology disciplines.
• Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services.
• Experience with vulnerability management, technical incident response, security monitoring, and remediation validation.
• Practical experience with PowerShell, KQL, APIs, or other scripting and automation technologies.

Knowledge, Skills & Abilities

• Deep working knowledge of Microsoft Entra ID, Conditional Access, MFA, PIM, Microsoft Defender XDR, and Microsoft Purview.
• Strong understanding of identity and access management, endpoint security, cloud security, data protection, logging, and zero trust concepts.
• Ability to troubleshoot complex security issues, assess technical risk, and design practical controls for hybrid environments.
• Ability to work effectively with Infrastructure, Service Desk, application owners, data teams, vendors, and managed security providers.
• Strong analytical, documentation, communication, and project execution skills.

Preferred Certifications

• Microsoft Cybersecurity Architect Expert (SC-100) preferred.
• Microsoft Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), or Azure Security Engineer Associate (AZ-500) are beneficial.
• CISSP or equivalent security certification is helpful but not required.

Company Values:

Must adhere to The Gorilla Glue Company’s Core Values that ensure everyone works together to exceed expectations.

• Have fun, be passionate and show it!
• Act with integrity and respect in all relationships.
• Communicate openly and appreciate the effort of others.
• Embrace knowledge, growth, and change.
• Strive for excellence in what we do every day!