Cybersecurity Platform Engineer

Link Snacks is hiring a Cybersecurity Platform Engineer within the Global IT organization to drive the build-out, configuration, automation, and ongoing enhancement of enterprise cybersecurity platforms. The role acts as a technical owner for core Microsoft security capabilities, with a focus on Microsoft Defender, Microsoft Purview, cloud security, and identity and access management (IAM), helping mature controls across global environments.

This onsite position is based in Minneapolis, MN and offers a salary range of USD 115,000 - 130,000 per year.

What you will do

• Lead engineering, administration, and continuous improvement for Microsoft Defender capabilities, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, and related security integrations.
• Design, implement, and mature Microsoft Purview capabilities across data protection and information governance, including data loss prevention, insider risk, eDiscovery support, retention, sensitivity labeling, and compliance-driven control enforcement.
• Engineer cloud security controls for Microsoft Azure and Microsoft 365 environments, including secure configuration baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement, and remediation tracking.
• Own identity and access management engineering activities across Entra ID and Active Directory, including Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access, and secure authentication patterns.
• Develop automation, scripts, integrations, and repeatable processes to improve platform reliability, reduce manual effort, standardize controls, and support consistent enforcement globally.
• Partner with security operations, MDR, SIEM, infrastructure, network, application, data, OT, and business teams to integrate cybersecurity platforms into detection, response, vulnerability management, incident response, and operational workflows.
• Create and maintain security platform standards, configuration baselines, procedures, runbooks, diagrams, operational documentation, and audit-ready evidence tied to regulatory and cybersecurity framework requirements.
• Define and report platform health and security metrics, including control effectiveness, adoption, remediation progress, secure configuration status, and other actionable indicators for technical teams and leadership.
• Evaluate emerging platform capabilities, Microsoft security roadmap changes, cloud security trends, and industry best practices, and recommend improvements to strengthen the organization’s security posture.
• Perform other duties as assigned.

Required qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent professional experience (education is listed as incomplete in the source and may include an additional condition).
• 4+ years of hands-on experience engineering, administering, or improving cybersecurity platforms across Microsoft security, cloud security, identity, endpoint, data protection, or security operations domains.
• Strong foundation in cybersecurity platform engineering across endpoint security, cloud security, IAM, data protection, compliance controls, automation, and incident response support.
• Proficiency with Microsoft security and identity technologies plus Windows, Linux, PowerShell, scripting, API-based integrations, and automation of security operations processes.
• Experience with Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Active Directory, Microsoft Sentinel, and Microsoft 365 security and compliance capabilities.
• Skills in platform configuration, log analysis, alert tuning, dashboarding, control validation, secure baseline development, and remediation tracking.
• Proven ability to secure both IT and OT networks, including incident response, alert triage, and vulnerability management.
• Ability to manage identity and access controls, including Active Directory administration and privileged access management.
• Experience enforcing technical policies and executing cybersecurity strategies across enterprise environments.
• Experience with frameworks such as ISO 27001, NIST CSF, and GDPR.
• Ability to manage vendor relationships and coordinate with internal and external stakeholders on security incidents and compliance matters.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies.
• Knowledge of security design, technical governance, and third-party auditing practices.
• Ability to communicate complex technical issues clearly to both technical and non-technical audiences.
• Demonstrated discretion handling sensitive and confidential information.
• Strong adaptability, time management, and independent problem-solving skills.
• Ability to remain composed under pressure and provide after-hours support when necessary.
• Willingness to travel up to 10% for training and business-related activities.

Technologies

Microsoft Defender, Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, Microsoft Purview, Microsoft Azure, Microsoft 365, Entra ID, Active Directory, Conditional Access, PowerShell, API-based integrations, Microsoft Intune, Microsoft Sentinel, Microsoft 365 security and compliance capabilities, SIEM, MDR, Windows, Linux, eDiscovery, Data loss prevention, insider risk, sensitivity labeling, secure baseline development, cloud security posture management, workload protection, log analysis, alert tuning, dashboarding, encryption, authentication, ISO 27001, NIST CSF, GDPR.

Benefits

• Medical, dental and vision benefits
• Life and disability insurance
• 401k participation
• Paid holidays
• Paid time off
• Annual incentive and program-specific awards

Preferred qualifications

• Experience serving as primary engineer or platform owner for capabilities such as Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Defender for Cloud, Tenable Nessus, BeyondTrust, Palo Alto, or similar enterprise security technologies.
• Experience developing scalable security platform roadmaps, improving control maturity, reducing manual operational effort, and translating security requirements into technical implementation plans.
• Cybersecurity certifications such as CISSP, CISM, CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
• Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments.
• Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting.

Additional information

• Starting salary for this role is $115,000.00 - $130,000.00; actual salaries vary based on external market data, internal equity, location, and candidate skill set and experience.
• Base pay is one component of Link Snacks Total Rewards for Team Members.

Work environment and physical demands

• Work environment includes a plant/office setting with varying temperatures and noise levels; most work is conducted in a climate-controlled office.
• Exposure to manufacturing equipment movement and wet or slippery floors.
• Travel may be required.
• Regularly required to sit, use hands to finger, handle or feel, and talk or hear; occasionally required to stand, walk, and reach with hands and arms.
• Occasionally must lift and/or carry up to 25 pounds.
• Specific vision abilities required include close vision.

Equal employment opportunity and E-Verify

• Link Snacks provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law; all information is kept confidential according to EEO guidelines.
• Link Snacks participates in the federal E-Verify program to confirm identity and employment authorization of newly hired employees.