Cyber Security Engineer II

Johns Manville is hiring a Cyber Security Engineer II for an onsite role in Denver, CO. In this position, you will design, implement, and support enterprise security initiatives across areas including network infrastructure, engineering environments, and manufacturing plant floor systems.

The work combines security system management, incident handling, and security project management. You will collaborate with business and technical peers to implement security controls, troubleshoot issues, and help train and coach system users.

What you’ll do

• Research, recommend, and implement security technologies within your architecture area of responsibility.
• Apply security project management skills to support timeliness and quality for security projects.
• Manage security systems and technologies including Cloud security, email security, data protection, endpoint security, Microsoft 365, and tools used by the security team.
• Partner with business and technical peers to deploy security systems, introduce new technology, and support incident troubleshooting.
• Provide training and coaching for Johns Manville system users.
• Oversee security incident handling by responding to security events, analyzing detected or escalated activity, and developing and coordinating remediation plans.
• Perform forensic analysis of security violations and report investigation details to management.

Technologies in scope

• Cloud security
• Email security
• Data protection
• Endpoint security
• Microsoft 365
• Security Information and Event Management (SIEM)
• Security Orchestration, Automation and Response (SOAR)

What you bring

• Bachelor’s degree, with minimum 5 years of IT experience, or 8 years overall IT experience with 6 years in cyber or network security.
• Cyber or network security certifications such as CISSP, ENCE, SANS GIAC, Cisco CCSP, CISM, or an applicable related certification.
• Expert level experience with security technologies relevant to your areas of responsibility, including combinations such as:
  • email protection
  • Cloud security
  • endpoint management, deployment, and security
  • threat management
  • vulnerability and penetration management
  • data protection
  • insider threat management
  • identity management
  • SIEM and SOAR
• Demonstrated skills in incident response best practices, processes, procedures, and technologies.
• Solid knowledge and experience with forensic best practices.
• Understanding of web application design and secure software development lifecycles (preferred).
• Ability to handle sensitive and confidential information.

Work schedule and mobility

• On-call coverage and after-hours work as needed.
• Moderate travel: 11 to 29 days per year.
• Typical office environment, with the need to travel to manufacturing facilities globally for projects.

Compensation and benefits

• Pay range: USD 124,200 - 170,800 per year (base salary). Pay will vary based on relevant experience, skills, and education.
• Eligible for an incentive bonus.
• Health benefits: choice of comprehensive medical plans, dental, vision, wellness program, and critical illness insurance.
• JM sponsors a 401(k) plan with a sizeable company match.
• Paid vacation; paid sick and parental leave for eligible employees.
• Basic life insurance, short-term and long-term disability coverage.
• Employee assistance program.
• Business travel accident coverage; supplemental life and accidental death and dismemberment insurance available.
• Health spending account, traditional flexible spending account, and dependent care spending account.
• Tuition reimbursement for undergraduate and certain graduate programs.

Additional information

• JM encourages applicants who may not meet 100% of the requirements to still apply.
• Johns Manville supports diversity and inclusion and is an Equal Opportunity/Affirmative Action employer.
• Incumbent must be physically able to perform essential job functions; reasonable accommodations may be available.
• Drug-free workplace with pre-employment substance abuse testing.