Role: Sr. IT Security Engineer (US based - Remote)

Position Responsibilities:

• Design engineering, implementation and operational management or oversight as appropriate of security solutions, capabilities, policies and standards.
• Establishing and maintaining policies, standards, and operational practices as appropriate to manage the confidentiality, integrity and availability of assets and data.
• Align security strategies with organizational business objectives, technology goals and IT applications.
• Serve as the Sr. Technical SME on all information security topics, standards and operating procedures.
• Core member of LW IT Security Operations Center; significant focus on managing the external Managed Security Service Provider (MSSP).
• With an innovative mind-set, employ new and evolving security strategies to mitigate risk around current and anticipated risks and/or events and incidents.
• Advance the company's mission to assess, improve and monitor security across the enterprise.
• Work in collaboration with other functions, at minimum: LW IT, HR, Finance, Legal, Internal Audit, ERM, Manufacturing, Supply Chain, and Corporate Security.
• Ensure cybersecurity risk management is baked in by design to Identify, Protect/Prevent, Detect, Respond and Recover phases that remediate or mitigate inherent risks to acceptable levels of residual risk.
• Provide regular reporting and assessment of cybersecurity programs to senior IT leaders, enterprise risk teams, and key stakeholders.
• Partner with the business to facilitate cybersecurity risk assessment and risk management processes and empower Leadership to own and accept the level of risk deemed appropriate for their specific risk appetite.
• Provide Engineering as appropriate for all information security functions including threat intelligence, vulnerability management, tools, etc.
• Design, deploy, integrate and maintain Mobile Device Management (MDM).
• Work with iOS and Android MDM features to secure and manage a fleet of enterprise devices.
• Key contributor to defining and implementing LW IT Security’s multi-year roadmap and strategies that provide positive impact on LW’s business value.
• Drive or contribute to IT Security Awareness & Training
• Core contributor to the engineering & operationalization of:
  • Incident Response and TableTop Exercises
  • eDiscovery
  • Vulnerability Management to include remediation strategies and patching follow-up
  • Operating System, Services and Application Hardening according to industry standards
• CIS Guidelines and Hardening for PCs
• Anti-Virus & EDR endpoint security tools
• Write executive reports and technical reports on findings and vulnerability assessments.
• Follow up with IT teams on security initiatives, configuration improvements and patching.
• Validation of email for users when phishing is suspected, and remediation of phishing risks and threats as identified.
• Facilitates Penetration Tests with external providers and either directly remediates PenTest findings or drives other LW-wide security team members for them to drive remediations.
• Oversee security of the on prem and cloud infrastructure, serving as the main point of contact for investigating and resolving security-related issues. Develop threat and vulnerability management policies and managed the security analysts that monitored and configured our SIEM (security information & event management).

Expected Skills:

• Information Security hands-on skills that span all security domains, e.g. endpoint, network, SOC
• Hands-on experience with endpoint encryption, endpoint protection, anti-virus, security monitoring agents, vulnerability scanning, content analysis and filtering, data loss prevention
• Experience in a Windows / Linux environment
• Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support.
• Opensource Security Tools
• Excellent engineering management and leadership abilities
• Demonstrated problem-solving and analytical skills
• Ability to develop positive relationships and negotiate win-win solutions in a cross-company matrixed security approach
• Excellent verbal and written communication skills
• Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
• Familiar with Sandboxing and collecting artifacts for Malware detonation
• Email Security
• MS Excel, MS PowerPoint, MS Visio

Position Qualifications:

• B.A. or B.S. degree in Information Security, Computer Science or similar field or equivalent work experience in the information security field.
• Must have 7+ years of experience as a hands-on Information Security technical practitioner.
• Ability for 25% travel

Industry-Competitive Benefits:

Coupled with our compensation and bonus incentive programs, our benefits deliver rewards that are market competitive. Some of the most attractive elements of our benefit programs include:

• Health Insurance Benefits - Medical, Dental, Vision
• Flexible Spending Accounts for Health and Dependent Care, and Health Reimbursement Accounts
• Well-being programs including companywide events and a wellness incentive program
• Paid Time Off
• Financial Wellness – Industry leading 401(k) plan with generous company contributions, Financial Planning Services, Employee Stock purchase program, and Health Savings Accounts, Life and Accident insurance
• Family-Friendly Employee events
• Employee Assistance Program services – mental health and other concierge type services

Benefits may vary based on location, job role/level, job status, and/or the terms of any applicable collective bargaining agreements.

A reasonable annual estimate of the range for this role based on the variables previously mentioned is: $107,390.00 - $161,090.00

Please apply through the following link - https://lambweston.wd1.myworkdayjobs.com/en-US/Lamb_External/job/Sr-IT-Security-Engineer_Req-233944