Sr Prin Security Engineer

Consumers Energy is hiring a Senior Principal Security Engineer to support some of the organization’s most critical security initiatives. In this hybrid role based in Jackson, MI, you will serve as both a technical authority and a strategic leader, shaping security architecture, improving defenses, and guiding incident readiness and response across the enterprise.

What you’ll do

• Architect, implement, operate, and maintain comprehensive security solutions across systems, networks, and applications to improve resilience against emerging threats.
• Lead and participate in complex incident response and problem-solving efforts, coordinating across teams to analyze root causes, mitigate impacts, and drive long-term corrective actions.
• Develop and optimize security controls by applying technology and process improvements aligned with business objectives and security requirements.
• Evaluate and deploy security tools and platforms across domains such as Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, and Vulnerability Management to strengthen visibility, detection, and response.
• Provide leadership, guidance, and mentorship to other cybersecurity professionals, including Associate Engineers and Career Engineers.
• Conduct threat modeling and risk assessments to identify vulnerabilities, recommend mitigations, and design security controls.
• Collaborate with Development, Information Technology, and business stakeholders to embed security best practices across the system lifecycle.
• Stay current on emerging threats, vulnerabilities, and security technologies, translating findings into strategic recommendations to improve the organization’s security posture.
• Automate security processes using scripting languages and SOAR platforms to improve efficiency and consistency in incident response and vulnerability management.
• Lead the design, implementation, and continuous improvement of enterprise Identity and Access Management (IAM) capabilities, including authentication, authorization, provisioning, and identity lifecycle management.
• Act as a subject matter expert for IAM platforms, governance processes, access controls, and identity security best practices.
• Lead complex IAM initiatives involving system integrations, platform enhancements, automation efforts, and improvements to identity governance.
• Perform other non-essential duties as assigned or as business needs require.

Required background

• Excellent written and verbal communication skills, with the ability to influence both technical and non-technical stakeholders.
• Strong leadership and mentoring capabilities focused on team development and organizational success.
• Demonstrated ability to collaborate, with professional standards described as being humble, hungry, and people-smart.
• Expert-level knowledge of security architectures, technologies, and defensive strategies.
• Subject matter expertise in at least two security domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
• Advanced troubleshooting and analytical skills to navigate complex systems and resolve critical issues efficiently.
• Strong strategic thinking and decision-making in high-pressure, fast-changing environments.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, with ten (10) or more years of hands-on experience in Information Technology, cybersecurity, computer networking, or systems engineering.
• Practical experience with technologies including AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure Active Directory (Azure AD), CI/CD platforms, DDoS protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure-as-Code (IaC) Security, Logging and Monitoring Solutions, Multi-Factor Authentication (MFA) Technologies, and additional areas such as Network Access Control (NAC), Networking Protocols, Scripting Languages, Security Orchestration, Automation, and Response (SOAR) platforms, Software Composition Analysis (SCA), Secure Development Practices, Security Assessment and Testing, Security Configuration Assessment, Single Sign-On (SSO), Static Application Security Testing (SAST), Threat Intelligence, Vulnerability Management, Virtual Private Networks (VPNs), and Web Proxy technologies.
• Alternative qualifications are available: an associate degree with twelve (12) or more years of the experience outlined above, or a high school diploma/GED with fourteen (14) or more years of the experience outlined above.

Hybrid location and onsite requirements

• Hybrid (virtual/onsite) with required onsite days on Monday, Tuesday, and Thursday.
• Onsite location: One Energy Plaza, Jackson, MI.
• Candidate must be within commutable distance or willing to relocate (relocation package is available for those that qualify).

Benefits

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Note: This position is not eligible for immigration sponsorship (for example, H-1B, TN, and similar programs). The company also states it cannot hire individuals with CPT, OPT, or STEM OPT for this position, including participation in the H-1B lottery program.

Consumers Energy values Diversity, Equity & Inclusion and supports Employee Resource Groups including Women in Energy (WE), Minority Advisory Panel (MAP), Pride Alliance of Consumers Energy (PACE), GENERGY, capable, Interfaith, People Planet Partners, and Veterans Advisory Panel (VAP), aligned to a culture of Caring, Empowered, Deliberate, Agility, and Ownership.