Senior Security Engineer

The Senior Security Engineer is the primary technical cybersecurity expert for GORILLA GLUE COMPANY, helping design, implement, operate, and validate security controls across identity, endpoint, cloud, data protection, and security operations. This onsite role in Sharonville, OH focuses on reducing risk and continuously improving the company’s cybersecurity posture by partnering with internal teams and managed security providers.

In this position, you will support Microsoft security capabilities end to end, from identity and access to data protection and detection workflows, while also contributing to incident response, architecture reviews, and industrial cybersecurity for manufacturing and OT environments.

Key Responsibilities

• Administer and continuously improve Microsoft Entra ID security controls, including Conditional Access, multifactor authentication, Privileged Identity Management, access reviews, and privileged-access hygiene.
• Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads.
• Design and implement Microsoft Purview controls for data classification, data loss prevention, information protection, and secure AI adoption.
• Maintain strong working knowledge of SIEM integrations, security telemetry, KQL, and Microsoft Sentinel to support the managed detection environment.
• Design and implement security controls across Microsoft 365, Azure, hybrid identity, endpoints, servers, cloud services, and business technology environments.
• Conduct security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services.
• Develop security automation using PowerShell, KQL, APIs, and orchestration capabilities to improve consistency, visibility, and response speed.
• Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls.
• Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact.
• Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends.
• Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets.
• Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned.
• Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions.
• Perform or support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events.
• Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners.
• Partner with Plant IT teams to strengthen cyber security posture of manufacturing and OT environments.
• Assist in the design, implementation, and ongoing management of network segmentation and connected manufacturing technology.
• Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies.
• Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards.
• Support Information Security policies, standards, and compliance requirements.
• Maintain security documentation, diagrams, and procedures.
• Assist with vendor security reviews and risk assessments.
• Support audits and cybersecurity assessments.

What You Bring

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent professional experience).
• 5+ years of progressive experience in security engineering, cybersecurity operations, cloud security, identity security, or related disciplines.
• Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services.
• Experience with vulnerability management, technical incident response, security monitoring, and remediation validation.
• Practical experience with PowerShell, KQL, APIs, or other scripting and automation technologies.
• Deep working knowledge of Microsoft Entra ID, Conditional Access, MFA, PIM, Microsoft Defender XDR, and Microsoft Purview.
• Strong understanding of identity and access management, endpoint security, cloud security, data protection, logging, and zero trust concepts.
• Ability to troubleshoot complex security issues, assess technical risk, and design practical controls for hybrid environments.
• Ability to work effectively with Infrastructure, Service Desk, application owners, data teams, vendors, and managed security providers.
• Strong analytical, documentation, communication, and project execution skills.

Technologies

• Microsoft Entra ID
• Conditional Access
• Multifactor authentication
• Privileged Identity Management
• Microsoft Defender
• Microsoft Purview
• SIEM
• KQL
• Microsoft Sentinel
• Microsoft 365
• Azure
• PowerShell
• APIs
• MDR/SOC providers
• Microsoft Defender XDR
• Zero trust

Benefits

• Competitive compensation packages
• Comprehensive healthcare benefits
• Other perks and incentives
• Recognized as a top place to work for 16 years in a row

Preferred Certifications

• Microsoft Cybersecurity Architect Expert (SC-100) preferred
• Microsoft Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), or Azure Security Engineer Associate (AZ-500) are beneficial
• CISSP or equivalent security certification is helpful but not required

Company Values

• Have fun, be passionate and show it!
• Act with integrity and respect in all relationships.
• Communicate openly and appreciate the effort of others.
• Embrace knowledge, growth, and change.
• Strive for excellence in what we do every day!