Security Engineer

Reynolds Consumer Products is hiring a Security Engineer for onsite work at its Corporate Headquarters in Lake Forest, IL.

Key Responsibilities

• Create, execute, and keep up the company security framework
• Collaborate across teams to safeguard systems and data with a focus on confidentiality, integrity, and accessibility
• Coordinate with business units to align the security framework to industry standards and business goals
• Design, implement, and maintain enterprise-grade security controls across network, cloud, and endpoint environments
• Engineer solutions aligned to RCP security standards, policies, and architectural patterns
• Build secure configurations for firewalls, proxies, IDS/IPS, secure web gateways, and segmentation technologies
• Engineer and harden cloud security configurations across Azure, AWS, and GCP (identity, workload protection, VM/container security, logging, and network controls)
• Implement and optimize IAM controls including MFA enforcement, conditional access, identity governance, and privileged access restrictions
• Integrate cloud telemetry into SIEM/EDR platforms and design detections
• Strengthen security network architectures including segmentation, routing, hybrid connectivity, VPN, and micro-segmentation
• Engineer security logging pipelines for network appliances, DNS, firewalls, and load balancers to improve detection coverage
• Validate and remediate findings from network security assessments and penetration tests
• Act as technical owner or co-owner for key platforms: Firewalls & IDS/IPS, Secure Web Gateways (SWG), and cloud-native security capabilities
• Build automations, integrations, dashboards, and health monitoring for security tooling
• Continuously improve security posture via configuration hardening, patch alignment, and reducing attack surface across servers, endpoints, OT devices, and cloud workloads
• Evaluate new security technologies, run POCs, and recommend based on business needs and threat trends
• Partner with Cyber Defense to tune detections, improve telemetry quality, and close detection gaps
• Work with Infrastructure and Application teams to support secure deployment pipelines, secure coding patterns, and secure design
• Assist teams with compliance, audit, or regulatory obligations
• Develop and maintain security standards, baseline configurations, diagrams, runbooks, and engineering playbooks
• Provide technical guidance to IT partners to drive consistent adoption of secure practices

Requirements

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field (or equivalent education plus relevant work experience)
• 6+ years of experience in information security with a focus on infrastructure security architecture
• Hands-on experience securing network and IT infrastructure at large scale, preferably in the CPG industry
• Deep understanding of network security architecture, segmentation strategies, and secure network design (LAN/WAN/WLAN)
• Experience implementing Zero Trust Network Architecture (ZTNA), including micro-segmentation and identity-centric access controls
• Hands-on experience with next-generation firewalls (NGFW), IDS/IPS, and secure web gateways
• Expertise in remote access solutions and secure connectivity for hybrid cloud environments
• Experience designing and reviewing secure network topologies for data centers, cloud, and hybrid networks
• Strong understanding of cloud-native security models, shared responsibility, and secure design patterns (hub-and-spoke, landing zones, hybrid connectivity)
• Knowledge of cloud network security concepts including VPC/VNet architecture, routing, private endpoints, peering, load balancers, API gateways, WAFs, and cloud-native firewalls
• Strong leadership and project management skills
• Excellent verbal and written communication; ability to explain complex security concepts to non-technical stakeholders
• Problem-solving and strategic mindset; ability to conduct and analyze research on security issues
• Ability to stay current with emerging security technologies
• Ability to work under pressure and handle shifting priorities
• Tech-savvy approach for applying deep technical knowledge to strengthen organizational capabilities

Security Architecture & Engineering

• Design, implement, and maintain enterprise-grade security controls across network, cloud, and endpoint environments
• Engineer solutions aligned to RCP security standards, policies, and architectural patterns
• Build secure configurations for firewalls, proxies, IDS/IPS, secure web gateways, and segmentation technologies

Cloud, Identity, and Telemetry Engineering

• Harden cloud security configurations across Azure, AWS, and GCP (identity, workload protection, VM/container security, logging, and network controls)
• Optimize IAM including MFA enforcement, conditional access, identity governance, and privileged access restrictions
• Integrate cloud telemetry into SIEM/EDR platforms and design detections

Network & Infrastructure Security

• Maintain secure network architectures covering segmentation, routing, hybrid connectivity, VPN, and micro-segmentation
• Build security logging pipelines for network appliances, DNS, firewalls, and load balancers
• Validate and remediate network security assessment and penetration test findings

Security Tooling & Platform Ownership

• Serve as technical owner or co-owner for Firewalls & IDS/IPS, Secure Web Gateways (SWG), and cloud-native security capabilities
• Create automations, integrations, dashboards, and health monitoring for security tools

Threat Prevention & Hardening

• Improve security posture through configuration hardening, patch alignment, and reducing attack surface across servers, endpoints, OT devices, and cloud workloads
• Evaluate new security technologies, conduct POCs, and make recommendations based on threat trends and business needs

Collaboration & Enablement

• Partner with Cyber Defense to tune detections, improve telemetry quality, and address detection gaps
• Work with Infrastructure and Application teams to support secure deployment pipelines and secure design for new solutions
• Assist teams in meeting compliance, audit, and regulatory obligations

Documentation & Standards

• Develop and maintain security standards, baseline configurations, diagrams, runbooks, and engineering playbooks
• Provide clear technical guidance to IT partners for consistent secure practice adoption

Technologies

• Azure, AWS, GCP
• SIEM, EDR
• MFA, IAM
• IDS/IPS
• VPN
• Zero Trust Network Architecture (ZTNA)
• NGFW
• Secure Web Gateways (SWG)
• Firewalls, DNS
• VPC/VNet, WAFs
• API gateways
• OT/ICS, OT devices
• Landing zones, Hybrid connectivity
• SIEM/EDR platforms
• Zscaler, Palo Alto Prisma Access, Cisco, Netskope
• Active Directory

Compensation

• USD 111,000 - 160,950 per year
• Eligible for 14% annual incentive if business financial goals and individual performance goals are met, subject to plan administration guidelines

Education/Experience (Additional)

• At least one recognized security certification (CISSP, CISM, CEH, etc.)
• Experience with secure SD-WAN architectures
• Hands-on exposure to SASE/ZTNA frameworks (Zscaler, Palo Alto Prisma Access, Cisco, Netskope)
• Experience designing secure network integrations for OT/ICS environments (if applicable)
• Additional certifications in active directory security, network security, cloud security, or system security