Sr. Cyber Security Engineer

TIDI Products is hiring a Senior Cyber Security Engineer to design, implement, and improve security controls across enterprise systems, cloud platforms, and emerging technologies. The role combines security engineering, automation, incident response, and technical leadership to protect business operations and information.

Responsibilities:

• Design, implement, and maintain enterprise and cloud security controls, including identity and access management, endpoint protection, network security, email security, encryption, and security monitoring
• Secure cloud environments through configuration reviews, access controls, logging, and risk-based remediation in partnership with system owners
• Develop and review infrastructure as code, incorporating reusable security controls, automated checks, change review, and configuration drift detection
• Partner with development and infrastructure teams to secure containerized workloads, including images, permissions, secrets, network access, and runtime protection
• Integrate automated security checks into application and infrastructure delivery processes, with practical remediation and exception workflows
• Evaluate AI services and integrations for security risks; recommend controls to protect sensitive data, limit access and automated actions, and support appropriate human oversight
• Automate repeatable security activities and evaluate AI-assisted security capabilities, validating results and protecting confidential information
• Lead investigation and response to significant security incidents, improve detection and response procedures, and participate in the after-hours on-call rotation
• Lead security design reviews, vulnerability assessments, and penetration testing activities; prioritize findings by business impact and verify corrective actions with system owners
• Evaluate emerging threats and security capabilities, recommending improvements based on risk reduction, operational needs, and effectiveness
• Contribute to the cybersecurity roadmap, lead security initiatives, establish technical standards, and maintain security documentation. Mentor colleagues and advise leadership on material risks and improvements
• Coordinate security changes with system and business owners, accounting for availability, testing, recovery, and rollback. Validate control effectiveness and perform other duties as assigned

Requirements:

• Five or more years of progressive experience in cybersecurity, including hands-on implementation and operation of security controls
• Strong knowledge of enterprise security controls, including identity and access management, endpoint protection, firewalls, intrusion detection and prevention, security monitoring, and incident response
• Demonstrated experience designing and implementing security solutions across enterprise and cloud environments, including access controls, networking, logging, encryption, and configuration management
• Strong understanding of network protocols, architecture, and troubleshooting
• Practical experience with infrastructure as code, scripting, and automation, including version control, change review, and secure handling of credentials and secrets
• Working knowledge of container security and integrating automated security checks into development and infrastructure delivery processes
• Familiarity with security risks associated with AI services and integrations, including sensitive data exposure, access permissions, and oversight of automated actions
• Strong analytical and problem-solving skills, with the ability to prioritize remediation based on business risk, operational requirements, and user impact
• Strong organizational and project management skills, with the ability to lead technical initiatives, collaborate across teams, and mentor colleagues
• Excellent written and verbal communication skills, including the ability to explain security risks and tradeoffs to technical and nontechnical stakeholders
• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field preferred
• Advanced certifications, such as CISSP, CISM, CEH, OSCP, or equivalent, are highly preferred
• Experience in manufacturing or other operationally sensitive environments preferred