Security Engineer

Consumers Energy is building security that keeps pace with changing threats. As a Security Engineer in a hybrid role based in Jackson, MI, you’ll help strengthen the organization’s security program through hands-on control implementation, continuous monitoring, and incident response support, while improving security processes across the system lifecycle.

This position includes opportunities to operate and secure security infrastructure, automate key workflows using SOAR and scripting, and work across teams that include Development, IT, and business stakeholders. You’ll also contribute to security documentation and compliance support, while staying current on emerging threats and industry practices.

Responsibilities

• Partner with cross-functional teams, including Development, IT, and business stakeholders, to embed security best practices throughout the system lifecycle.
• Automate security processes using scripting and Security Orchestration, Automation, and Response (SOAR) platforms to improve efficiency and consistency for incident response and vulnerability management.
• Deploy and operate security tools across at least one security domain, such as Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
• Implement, operate, and maintain security solutions for systems, networks, and applications to improve resilience against emerging threats.
• Support incident response and problem-solving by investigating security events and applying corrective actions.
• Assist with maintaining security policies, procedures, and documentation aligned to regulatory and organizational standards.
• Research and stay informed about emerging security threats, technologies, and industry practices to drive continuous improvement.
• Develop and optimize security controls through technology and process improvements that support business objectives while meeting security requirements.

Requirements

• Excellent written and verbal communication skills, with the ability to communicate and influence both technical and non-technical stakeholders.
• Team-oriented approach and collaboration mindset, aligned with being humble, hungry, and people-smart.
• Knowledge of cybersecurity technologies, principles, and concepts.
• Hands-on experience in at least one security domain: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
• Strong troubleshooting and problem-solving skills to navigate systems and resolve routine technical issues efficiently.

Tools and Technologies

Experience with one or more of the following is expected: SOAR platforms, AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure AD, CI/CD Platforms, DDoS Protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure as Code (IaC) Security, Logging, Multifactor Authentication Technologies, Network Access Control (NAC), Networking Protocols, Scripting Languages, Software Composition Analysis (SCA), Secure Development Practices, Security Assessment and Testing, Security Configuration Assessment, Single Sign-On (SSO), Static Application Security Testing (SAST), Threat Intelligence, Vulnerability Scanning and Assessment Tools, Virtual Private Networks (VPN), Web Proxies.

Benefits

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Location and Work Model

This is a hybrid (virtual/onsite) role with required onsite days on Monday, Tuesday and Thursday at One Energy Plaza in Jackson, MI. The selected candidate must be within commutable distance or willing to relocate (relocation package is available for those that qualify).

Immigration Sponsorship

This position is not eligible for immigration sponsorship (for example, H-1B, TN, etc.). Consumers Energy is unable to hire individuals with CPT, OPT, or STEM OPT for this role, as it is not eligible for participation in the H-1B lottery program and does not offer current or future immigration sponsorship for a work visa.

Education and Experience

You meet the baseline criteria with one of the following options:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, with two (2) or more years of hands-on experience with technologies and disciplines listed in the requirements (including AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure AD, CI/CD Platforms, DDoS Protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure as Code (IaC) Security, Logging, Multifactor Authentication Technologies, Network Access Control (NAC), Networking Protocols, Scripting Languages, Software Composition Analysis (SCA), Secure Development Practices, Security Assessment and Testing, Security Configuration Assessment, Single Sign-On (SSO), Static Application Security Testing (SAST), Threat Intelligence, Vulnerability Scanning and Assessment Tools, VPN, and Web Proxies).
• Associate degree in Cybersecurity, Computer Science, Information Technology, or a related field, with four (4) or more years of the experience outlined above.
• High school diploma or GED, with six (6) or more years of the experience outlined above.