Security Engineer (Identity Platforms)

The Security Engineer (Identity Platforms) role supports Consumers Energy’s security program through hands-on implementation of security controls, continuous threat monitoring, and contribution to incident response. The position also focuses on analyzing security events and strengthening security processes across systems and applications.

Key Responsibilities

• Partner with cross-functional teams, including Development, IT, and business stakeholders, to incorporate security best practices throughout the system lifecycle.
• Automate security workflows where appropriate using scripting and Security Orchestration, Automation, and Response (SOAR) platforms to improve efficiency and consistency for incident response and vulnerability management.
• Deploy and operate security tools and platforms in at least one security domain, including Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
• Implement, operate, and maintain security solutions for systems, networks, and applications to build resilience against emerging threats.
• Participate in incident response and problem-solving, including investigating security events and executing corrective actions.
• Support security policies, procedures, and documentation to align with regulatory and organizational compliance needs.
• Stay current on emerging security threats, technologies, and industry practices to enable ongoing improvement.
• Develop and optimize security controls through technology and process improvements that meet security requirements while supporting business objectives.

Required Qualifications

• Strong written and verbal communication skills, including the ability to communicate with and influence both technical and non-technical stakeholders.
• Proven ability to work effectively in a team environment while demonstrating humble, hungry, and people-smart behaviors.
• Knowledge of cybersecurity technologies, principles, and concepts.
• Hands-on experience in at least one security domain: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
• Solid troubleshooting and problem-solving skills, with the ability to navigate systems and resolve routine technical issues efficiently.

Security Technologies and Tools

• Identity and access related: AAA Services, Active Directory, Azure AD, Multifactor Authentication Technologies, Single Sign-On (SSO), Network Access Control (NAC)
• Security and network protection: Application Control, DDoS Protection, Data Loss Prevention (DLP), Email Security, Endpoint Detection and Response (EDR), Firewalls, Web Proxies, Virtual Private Networks (VPN), Logging
• Assessment and secure testing: Security Assessment and Testing, Security Configuration Assessment, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Security Assessment and Testing
• Vulnerability and software risk: Threat Intelligence, Vulnerability Scanning and Assessment Tools, Software Composition Analysis (SCA)
• Automation and orchestration: Security Orchestration, Automation, and Response (SOAR) Tools, SOAR, Scripting, Infrastructure as Code (IaC) Security
• Development lifecycle and operations: CI/CD Platforms, Secure Development Practices
• Discovery and inventory: Asset Discovery and Inventory Management
• Additional referenced items: Networking Protocols, SOAR platform

Education and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, with two (2) or more years of hands-on experience with the technologies and security disciplines referenced in the listing.
• OR Associate degree in the same fields, with four (4) or more years of the experience outlined above.
• OR High school diploma or GED, with six (6) or more years of the experience outlined above.

Location and Work Model

This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday, and Thursday, assigned to One Energy Plaza in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (a relocation package is available for those that qualify).

Compensation and Benefits

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Immigration Sponsorship

This position is not eligible for immigration sponsorship, for example H-1B or TN. Applicants should not apply if they will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B or TN. Individuals with CPT, OPT, or STEM OPT cannot be hired for this position, as the role is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship.

Minimum Experience

2 years minimum experience.