Security Engineer

Reynolds Consumer Products is hiring a Security Engineer for its Corporate Headquarters in Lake Forest, IL. This onsite role supports the creation, execution, and ongoing upkeep of the company security framework, with a focus on security architecture, cloud and identity security engineering, and network and infrastructure protection. You will partner across teams to improve controls, telemetry, and threat prevention while aligning security engineering work with organizational standards and business needs.

Key responsibilities

• Create, execute, and maintain the company’s security framework for Reynolds Consumer Products.
• Collaborate with multiple teams to protect systems and data, supporting confidentiality, integrity, and accessibility.
• Coordinate with business units to ensure the security framework reflects industry standards and supports business goals.
• Design, implement, and maintain enterprise-grade security controls across network, cloud, and endpoint environments.
• Engineer solutions aligned to Reynolds Consumer Products security standards, policies, and architectural patterns.
• Build secure configurations for firewalls, proxies, IDS/IPS, secure web gateways, and segmentation technologies.
• Engineer and harden cloud security configurations across Azure, AWS, and GCP, including identity, workload protection, VM/container security, logging, and network controls.
• Implement and optimize IAM controls including MFA enforcement, conditional access, identity governance, and privileged access restrictions.
• Integrate cloud telemetry into SIEM/EDR platforms and design detections as needed.
• Strengthen network security architectures through segmentation, routing, hybrid connectivity, VPN, and micro-segmentation.
• Engineer security logging pipelines for network appliances, DNS, firewalls, and load balancers to improve detection coverage.
• Validate and remediate findings from network security assessments and penetration tests.
• Act as a technical owner or co-owner for key platforms including Firewalls and IDS/IPS, Secure Web Gateways (SWG), and cloud-native security capabilities.
• Build automations, integrations, dashboards, and health monitoring for security tools.
• Continuously improve the security posture through configuration hardening, patch alignment, and reducing attack surface across servers, endpoints, OT devices, and cloud workloads.
• Evaluate new security technologies, conduct POCs, and provide recommendations based on business needs and threat trends.
• Partner with Cyber Defense to tune detections, improve telemetry quality, and address detection gaps.
• Work with Infrastructure and Application teams to support secure deployment pipelines, secure coding patterns, and secure design for new solutions.
• Support compliance, audit, or regulatory obligations.
• Develop and maintain security standards, baseline configurations, diagrams, runbooks, and engineering playbooks.
• Provide clear technical guidance to IT partners to drive consistent adoption of secure practices.

Required qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and relevant work experience.
• 6+ years of experience in information security with a focus on infrastructure security architecture.
• Hands-on experience managing and securing network and IT infrastructure in a large-scale organization, preferably within the CPG industry.
• Deep understanding of network security architecture, segmentation strategies, and secure network design across LAN/WAN/WLAN.
• Experience implementing Zero Trust Network Architecture (ZTNA), including micro-segmentation and identity-centric access controls.
• Hands-on experience with NGFW, IDS/IPS, and secure web gateways.
• Expertise in remote access and secure connectivity for hybrid cloud environments.
• Experience designing and reviewing secure network topologies for data centers, cloud environments, and hybrid networks.
• Strong understanding of cloud-native security models, shared responsibility, and secure design patterns (hub-and-spoke, landing zones, hybrid connectivity).
• Knowledge of cloud network security including VPC/VNet architecture, routing, private endpoints, peering, load balancers, API gateways, WAFs, and cloud-native firewalls.
• Strong leadership and project management skills.
• Excellent verbal and written communication skills, including the ability to explain complex security concepts to non-technical stakeholders.
• Problem-solving and strategic mindset, including the ability to balance risk and business needs.
• Ability to stay current with new technologies and continuously update skills.
• Ability to work under pressure and handle shifting priorities.
• Experience conducting and analyzing research on a wide range of security issues.

Technologies and tools

• Azure, AWS, GCP
• SIEM, EDR
• MFA, IAM, Active Directory
• IDS/IPS
• VPN
• Zero Trust Network Architecture (ZTNA)
• NGFW
• Secure Web Gateways (SWG)
• Firewalls, DNS
• VPC/VNet
• WAFs, API gateways
• OT/ICS, OT devices
• Landing zones, hybrid connectivity
• Zscaler, Palo Alto Prisma Access, Cisco, Netskope
• SIEM/EDR platforms

Compensation

USD 111,000 - 160,950 per year.

Incentive

• Eligible for a 14% annual incentive if business financial goals and individual performance goals are met, subject to plan administration guidelines.

Work context notes

• Listen, learn, and evolve.
• Thrive in a fast-paced environment.
• Put safety first.
• Value collaboration, teamwork, and shared outcomes.
• Operate with respect and ethics, and contribute to an inclusive workplace.
• Commit to improving impact in local communities and creating positive experiences.

Location: Lake Forest, IL (onsite).