Cybersecurity Platform Engineer

Link Snacks is seeking a Cybersecurity Platform Engineer to support the Global IT organization. This onsite role focuses on building, configuring, automating, and continuously improving enterprise cybersecurity platforms, with technical ownership across Microsoft security capabilities, cloud security controls, and identity and access management (IAM).

Location and Compensation

• Location: Minneapolis, MN (onsite)
• Salary: USD 115,000 to 130,000 per year
• Starting salary: $115,000.00 to $130,000.00; actual salaries vary based on external market data, internal equity, location, and candidate skill set and experience

Base pay is one component of Link Snacks Total Rewards.

Responsibilities

• Lead engineering, administration, and continuous improvement of Microsoft Defender capabilities, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, and related security integrations.
• Design, implement, and mature Microsoft Purview capabilities for data protection, information governance, data loss prevention, insider risk, eDiscovery support, retention, sensitivity labeling, and compliance-driven control enforcement.
• Engineer cloud security controls across Microsoft Azure and Microsoft 365, including secure configuration baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement, and remediation tracking.
• Drive IAM engineering efforts covering Entra ID, Active Directory, Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access, and secure authentication patterns.
• Develop automation, scripts, integrations, and repeatable processes to improve reliability, reduce manual effort, standardize controls, and support consistent enforcement across global environments.
• Partner with security operations, MDR, SIEM, infrastructure, network, application, data, OT, and business teams to integrate cybersecurity platforms with detection, response, vulnerability management, incident response, and operational workflows.
• Create and maintain security platform standards, configuration baselines, procedures, runbooks, diagrams, operational documentation, and audit-ready evidence aligned to regulatory and cybersecurity framework requirements.
• Define and report platform health and security metrics such as control effectiveness, adoption, remediation progress, and secure configuration status for technical teams and leadership stakeholders.
• Evaluate emerging platform capabilities, Microsoft security roadmap changes, cloud security trends, and industry best practices to recommend improvements that strengthen the organization’s security posture.
• Perform other duties as assigned.

Required Qualifications

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field (or equivalent professional experience).
• Experience: 4+ years of hands-on experience engineering, administering, or improving cybersecurity platforms across Microsoft security, cloud security, identity, endpoint, data protection, or security operations domains.
• Strong foundation in cybersecurity platform engineering, including endpoint security, cloud security, IAM, data protection, compliance controls, automation, and incident response support.
• Proficiency with Microsoft security and identity technologies, Windows, Linux, PowerShell, scripting, API-based integrations, and automation of security operations processes.
• Experience with Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Active Directory, Microsoft Sentinel, and Microsoft 365 security and compliance capabilities.
• Skilled in platform configuration, log analysis, alert tuning, dashboarding, control validation, secure baseline development, and remediation tracking.
• Proven ability to secure both IT and OT networks, including incident response, alert triaging, and vulnerability management experience.
• Proficiency managing identity and access controls, including Active Directory administration and privileged access management.
• Ability to execute cybersecurity strategies and enforce technical policies across enterprise environments.
• Experience working with security frameworks and standards such as ISO 27001, NIST CSF, and GDPR.
• Ability to manage vendor relationships and coordinate with internal and external stakeholders on security incidents and compliance matters.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies.
• Knowledge of security design, technical governance, and third-party auditing practices.
• Ability to communicate complex technical issues to technical and non-technical audiences.
• Demonstrated discretion when handling sensitive and confidential information.
• Strong adaptability, time management, and independent problem-solving skills.
• Ability to remain composed under pressure and provide after-hours support when necessary.
• Willingness to travel up to 10% for training and business-related activities.

Preferred Qualifications

• Experience serving as the primary engineer or platform owner for capabilities such as Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Defender for Cloud, Tenable Nessus, BeyondTrust, Palo Alto, or similar enterprise security technologies.
• Experience developing scalable security platform roadmaps, improving control maturity, reducing manual operational effort, and translating security requirements into technical implementation plans.
• Cybersecurity certifications such as CISSP, CISM, CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
• Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments.
• Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting.

Technologies

• Microsoft Defender, Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR
• Microsoft Purview
• Microsoft Azure, Microsoft 365
• Entra ID, Active Directory, Conditional Access
• PowerShell, API-based integrations
• Microsoft Intune, Microsoft Sentinel, SIEM, MDR
• Windows, Linux, eDiscovery, Data loss prevention, insider risk, sensitivity labeling
• Secure baseline development, cloud security posture management, workload protection
• Log analysis, alert tuning, dashboarding
• Encryption, authentication
• ISO 27001, NIST CSF, GDPR

Benefits

• Medical, dental and vision benefits
• Life and disability insurance
• 401k participation
• Paid holidays
• Paid time off
• Annual incentive and program-specific awards

Work Environment

• Plant/office setting with varying temperatures and noise levels
• Exposure to manufacturing equipment movement and wet or slippery floors
• Most work is conducted in a climate-controlled office
• Travel may be required

Physical Demands

• Regularly required to sit, use hands to finger, handle, or feel, and talk or hear
• Occasionally required to stand, walk, and reach with hands and arms
• Occasionally lift and/or carry up to twenty-five pounds
• Specific vision abilities required include close vision

Equal Employment Opportunity and E-Verify

• Link Snacks provides equal employment opportunity to all persons regardless of protected characteristics under federal, state, or local law
• All information will be kept confidential according to EEO guidelines
• Link Snacks participates in the federal E-Verify program to confirm identity and employment authorization for newly hired employees