Senior Security Engineer

Gorilla Glue Company is seeking a primary technical cybersecurity expert to design, implement, operate, and validate security controls across identity, endpoint, cloud, data protection, and security operations.

Key Responsibilities

• Administer and continuously improve Microsoft Entra ID security controls including Conditional Access, MFA, Privileged Identity Management (PIM), access reviews, and privileged-access hygiene
• Configure, operate, and optimize Microsoft Defender capabilities across endpoint, identity, email, cloud applications, and related security workloads
• Design and implement Microsoft Purview controls for data classification, data loss prevention, information protection, and secure AI adoption
• Maintain working knowledge of SIEM integrations, security telemetry, KQL, and Microsoft Sentinel to support a managed detection environment
• Design and implement security controls across Microsoft 365, Azure, hybrid identity, endpoints, servers, cloud services, and business technology environments
• Conduct security architecture reviews and technical risk assessments for new systems, projects, integrations, vendors, and cloud services
• Develop security automation using PowerShell, KQL, APIs, and orchestration capabilities to improve consistency, visibility, and response speed
• Establish technical standards, configuration baselines, implementation documentation, and operational runbooks for security controls
• Lead vulnerability and exposure prioritization using threat intelligence, exploitability, asset criticality, and business impact
• Partner with Infrastructure, application owners, and service providers to plan remediation, validate fixes, manage exceptions, and report aging and risk trends
• Validate deployment and coverage of required security agents, logging, integrations, and monitoring across in-scope assets
• Provide technical leadership during cybersecurity investigations and incidents, including scoping, containment, eradication, recovery, and lessons learned
• Coordinate with MDR/SOC providers on escalations, investigations, detection quality, telemetry gaps, and response actions
• Support phishing investigations, identity investigations, endpoint analysis, cloud investigations, and data protection events
• Translate technical findings into clear remediation actions, risk statements, and status updates for security leadership and control owners
• Partner with Plant IT teams to strengthen cybersecurity posture of manufacturing and OT environments
• Assist with design, implementation, and ongoing management of network segmentation and connected manufacturing technology
• Evaluate cybersecurity risks associated with industrial operations, control systems, and connected manufacturing technologies
• Ensure cyber security controls align with industry best practices, regulatory expectations, and corporate security standards
• Support Information Security policies, standards, and compliance requirements
• Maintain security documentation, diagrams, and procedures
• Assist with vendor security reviews and risk assessments
• Support audits and cybersecurity assessments

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience
• 5+ years of progressive experience in security engineering, cybersecurity operations, cloud security, identity security, or related disciplines
• Hands-on experience securing Microsoft 365, Azure, hybrid identity, endpoints, and cloud services
• Experience with vulnerability management, technical incident response, security monitoring, and remediation validation
• Practical experience with PowerShell, KQL, APIs, or other scripting and automation technologies
• Deep working knowledge of Microsoft Entra ID, Conditional Access, MFA, PIM, Microsoft Defender XDR, and Microsoft Purview
• Strong understanding of identity and access management, endpoint security, cloud security, data protection, logging, and zero trust concepts
• Ability to troubleshoot complex security issues, assess technical risk, and design practical controls for hybrid environments
• Ability to work effectively with Infrastructure, Service Desk, application owners, data teams, vendors, and managed security providers
• Strong analytical, documentation, communication, and project execution skills

Technologies

• Microsoft Entra ID
• Conditional Access
• Multifactor authentication
• Privileged Identity Management
• Microsoft Defender
• Microsoft Purview
• SIEM
• KQL
• Microsoft Sentinel
• Microsoft 365
• Azure
• PowerShell
• APIs
• MDR/SOC providers
• Microsoft Defender XDR
• Zero trust

Preferred Certifications

• Microsoft Cybersecurity Architect Expert (SC-100) preferred
• Microsoft Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), Azure Security Engineer Associate (AZ-500) beneficial
• CISSP or equivalent security certification helpful but not required

Benefits

• Competitive compensation packages
• Comprehensive healthcare benefits
• Other perks and incentives
• Recognized as a top place to work for 16 years in a row

Company Values

• Have fun, be passionate and show it
• Act with integrity and respect in all relationships
• Communicate openly and appreciate the effort of others
• Embrace knowledge, growth, and change
• Strive for excellence in what we do every day

Location: Sharonville, OH (onsite)